Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security - page 16

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Version: Security
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp5_ltss_extended:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4182
Public exploits: 64
Known exploited (KEV): 28

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP5 LTSS Extended version Security SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security is affected by 4182 vulnerabilities: 13 critical, 489 high, 960 medium, 2720 low Critical High Medium Low

Vulnerabilities (4182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-16729		 CWE-74 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-16728		 CWE-444 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-15157		 CWE-93 Low
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 5 more
#VU135015 - Improper input validation
CVE-2026-48618		 CWE-20 High
No
No
 - 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 12 more
#VU135018 - Resource exhaustion
CVE-2026-48619		 CWE-400 Medium
No
No
 - 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135020 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48928		 CWE-297 Medium
No
No
 - 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135021 - Improper Null Termination
CVE-2026-48930		 CWE-170 Medium
No
No
 - 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 11 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151		 CWE-770 Medium
No
No
 - 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 13 more
#VU134752 - Permissive List of Allowed Inputs
CVE-2026-11525		 CWE-183 Low
No
No
 - 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 - 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 9 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 - 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 37 more
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131		 CWE-362 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU126388 - Uncaught Exception
CVE-2025-59465		 CWE-248 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 23 more
#VU126389 - Uncaught Exception
CVE-2025-59466		 CWE-248 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 23 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 - 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 29 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 33 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 22 more
#VU119383 - Use After Free
CVE-2025-62408		 CWE-416 Medium
No
No
 - 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 5 more


Showing elements 301 - 320 out of 4182