Known vulnerabilities in SUSE Linux Enterprise Server
Vendor:
SUSE
Software:
SUSE Linux Enterprise Server
Software CPE:
cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
2770
Public exploits:
130
Known exploited (KEV):
40
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
16.0
11-SP4-LTSS-EXTREME-CORE
15-SP3-LTSS
15-SP3-BCL
11-SP3-CLIENT-TOOLS-BETA
11-SP4-CLIENT-TOOLS-BETA
11-EXTRA
11-SECURITY
12-SP2-LTSS-ERICSSON
12-SP2-LTSS-SAP
12-SP2-LTSS
11-SP3-CLIENT-TOOLS
11-SP4-CLIENT-TOOLS
15-SP2
15-SP1
12-SP3
12-SP4
15-SP2-LTSS
15-SP2-BCL
15-SP3
15-SP4
15-LTSS
15-SP1-BCL
15-SP1-LTSS
12-SP5
12-SP4-LTSS
12-SP3-LTSS
12-SP3-BCL
12-SP2-BCL
11-SP4-LTSS
12 SP2-LTSS-ERICSSON
12 SP2-LTSS-SAP
15 SP3
15 SP2
15 SP1
15
12 SP5
12 SP4
12 SP3
12 SP2
12 SP1
12
11 SP4
11 SP3
11 SP2
11 SP1
11
Vulnerabilities (2770)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU136685 - Insecure Temporary File CVE-2026-25645 |
CWE-377 | Low | - | 02.07.2026 | - | ||
| #VU132319 - Information Exposure Through Timing Discrepancy CVE-2026-47783 |
CWE-208 | Low | - | 26.05.2026 | - | ||
| #VU132320 - Information Exposure Through Timing Discrepancy CVE-2026-47784 |
CWE-208 | Low | - | 26.05.2026 | - | ||
| #VU130908 - Improper Encoding or Escaping of Output CVE-2026-7263 |
CWE-116 | Medium | - | 10.05.2026 | - | ||
| #VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-6735 |
CWE-79 | Medium | - | 10.05.2026 | - | ||
| #VU130910 - NULL Pointer Dereference CVE-2026-7259 |
CWE-476 | Medium | - | 10.05.2026 | - | ||
| #VU130911 - Out-of-bounds read CVE-2026-6104 |
CWE-125 | Medium | - | 10.05.2026 | - | ||
| #VU130912 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-14179 |
CWE-89 | High | - | 10.05.2026 | - | ||
| #VU130913 - Use After Free CVE-2026-6722 |
CWE-416 | Medium | - | 10.05.2026 | - | ||
| #VU130914 - Use After Free CVE-2026-7261 |
CWE-416 | Medium | - | 10.05.2026 | - | ||
| #VU130915 - NULL Pointer Dereference CVE-2026-7262 |
CWE-476 | Medium | - | 10.05.2026 | - | ||
| #VU130916 - Integer overflow CVE-2026-7568 |
CWE-190 | Medium | - | 10.05.2026 | - | ||
| #VU130917 - Type conversion CVE-2026-7258 |
CWE-704 | Medium | - | 10.05.2026 | - | ||
| #VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431 |
CWE-200 | Medium | - | 09.05.2026 | - | ||
| #VU130763 - Resource Management Errors CVE-2026-43284 |
CWE-399 | High | - | 08.05.2026 | - | ||
| #VU130759 - Resource Management Errors CVE-2026-43500 |
CWE-399 | High | - | 08.05.2026 | - | ||
| #VU128730 - Improper Authorization CVE-2026-33186 |
CWE-285 | High | - | 01.05.2026 | - | ||
| #VU127864 - Improper control of a resource through its lifetime CVE-2026-31431 |
CWE-664 | High | - | 25.04.2026 | - | ||
| #VU125945 - Improper input validation CVE-2026-34986 |
CWE-20 | Medium | - | 14.04.2026 | - | ||
| #VU123890 - Heap-based Buffer Overflow CVE-2026-31853 |
CWE-122 | Medium | - | 11.03.2026 | - |
Showing elements 1 - 20 out of 2770