Known vulnerabilities in SUSE Linux Enterprise Server 12 SP2

Vendor: SUSE
Version: SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Total vulnerabilities: 463
Public exploits: 26
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP2 SUSE Linux Enterprise Server 12 SP2 is affected by 463 vulnerabilities: 6 critical, 81 high, 194 medium, 182 low Critical High Medium Low

Vulnerabilities (463)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136685 - Insecure Temporary File
CVE-2026-25645
CWE-377 Low
No
No
- 02.07.2026 SB2026070223
SB2026070226
SB2026070229
and 11 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431
CWE-200 Medium
No
No
- 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 31 more
#VU128730 - Improper Authorization
CVE-2026-33186
CWE-285 High
No
No
- 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 68 more
#VU128147 - Resource exhaustion
CVE-2026-31958
CWE-400 Medium
No
No
- 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 34 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597
CWE-345 Medium
No
No
- 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
- 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 66 more
#VU122809 - Out-of-bounds write
CVE-2026-25506
CWE-787 Low
No
No
- 13.02.2026 SB2026021332
SB2026021333
SB2026021338
and 21 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441
CWE-409 Medium
No
No
- 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU120977 - Cryptographic Issues
CVE-2025-15444
CWE-310 Medium
No
No
- 06.01.2026 SB2026010618
SB2026012162
SB2026012917
and 3 more
#VU120975 - Cryptographic Issues
CVE-2025-69277
CWE-310 Medium
No
No
- 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 17 more
#VU120229 - Improper Authentication
CVE-2025-62349
CWE-287 Low
No
No
- 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-62348
CWE-94 Medium
No
No
- 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724
CWE-644 Low
No
No
- 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725
CWE-834 Low
No
No
- 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726
CWE-834 Medium
No
No
- 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU119233 - Resource exhaustion
CVE-2025-13836
CWE-400 Medium
No
No
- 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU119231 - Resource exhaustion
CVE-2025-66471
CWE-400 Medium
No
No
- 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418
CWE-770 Medium
No
No
- 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU106004 - Memory corruption
CVE-2025-1365
CWE-119 Medium
No
No
- 25.03.2025 SB2025032513
SB2025032515
SB2025032519
and 2 more
#VU105535 - Command injection
CVE-2025-24049
CWE-77 Low
No
No
- 11.03.2025 SB2025031172
SB2025032640
SB2025040993
and 2 more


Showing elements 1 - 20 out of 463