Known vulnerabilities in SUSE Linux Enterprise High Availability Extension 15 SP5

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability Extension 15
Version: SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2670
Public exploits: 22
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability Extension 15 version SP5 SUSE Linux Enterprise High Availability Extension 15 SP5 is affected by 2670 vulnerabilities: 1 critical, 15 high, 77 medium, 2577 low Critical High Medium Low

Vulnerabilities (2670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949		 CWE-787 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139942 - Out-of-bounds read
CVE-2026-58216		 CWE-125 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139943 - Resource exhaustion
CVE-2026-58218		 CWE-400 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139944 - Improper Access Control
CVE-2026-58221		 CWE-284 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222		 CWE-89 Low
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139946 - Improper input validation
CVE-2026-58224		 CWE-20 Medium
No
No
 - 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 9 more
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779		 CWE-732 Low
No
No
 - 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 4 more
#VU132341 - Improper Access Control
CVE-2026-2340		 CWE-284 Low
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012		 CWE-295 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238		 CWE-476 Medium
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408		 CWE-77 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480		 CWE-77 High
No
No
 - 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU117239 - Out-of-bounds read
CVE-2025-9640		 CWE-125 Medium
No
No
 - 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230		 CWE-78 High
Public exploit available
No
 - 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU116897 - Resource exhaustion
CVE-2025-61919		 CWE-400 Medium
No
No
 - 10.10.2025 SB2025101026
SB2025110346
SB2025110402
and 17 more
#VU116895 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61780		 CWE-200 Medium
No
No
 - 10.10.2025 SB2025101026
SB2025110402
SB2025110465
and 6 more
#VU116636 - Improper input validation
CVE-2025-11230		 CWE-20 Medium
No
No
 - 06.10.2025 SB2025100656
SB2025100661
SB2025100663
and 19 more
#VU111989 - Resource exhaustion
CVE-2025-46727		 CWE-400 Medium
No
No
 - 27.06.2025 SB2025062709
SB2025062710
SB2025062711
and 24 more
#VU111976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32441		 CWE-362 Low
No
No
 - 26.06.2025 SB2025062650
SB2025062720
SB2025062721
and 5 more
#VU107589 - Heap-based Buffer Overflow
CVE-2025-32464		 CWE-122 Low
No
No
 - 17.04.2025 SB2025041738
SB2025041740
SB2025041741
and 4 more


Showing elements 1 - 20 out of 2670