Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 - page 16

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12
Version: SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 6407
Public exploits: 140
Known exploited (KEV): 57

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 version SP5 SUSE Linux Enterprise Server 12 SP5 is affected by 6407 vulnerabilities: 30 critical, 757 high, 1490 medium, 4129 low Critical High Medium Low

Vulnerabilities (6407)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-16729		 CWE-74 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-16728		 CWE-444 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-15157		 CWE-93 Low
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 5 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151		 CWE-770 Medium
No
No
 - 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 13 more
#VU134752 - Permissive List of Allowed Inputs
CVE-2026-11525		 CWE-183 Low
No
No
 - 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518		 CWE-367 Low
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133147 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-43619		 CWE-59 Low
No
No
 - 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 16 more
#VU128147 - Resource exhaustion
CVE-2026-31958		 CWE-400 Medium
No
No
 - 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131		 CWE-362 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU126388 - Uncaught Exception
CVE-2025-59465		 CWE-248 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 23 more
#VU126389 - Uncaught Exception
CVE-2025-59466		 CWE-248 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 23 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 - 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 29 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 33 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 22 more
#VU119383 - Use After Free
CVE-2025-62408		 CWE-416 Medium
No
No
 - 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 5 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Public exploit available
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 12 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 - 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more


Showing elements 301 - 320 out of 6407