Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security - page 4

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Version: Security
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp5_ltss_extended:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3012
Public exploits: 56
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP5 LTSS Extended version Security SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security is affected by 3012 vulnerabilities: 13 critical, 340 high, 531 medium, 2128 low Critical High Medium Low

Vulnerabilities (3012)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135862 - Improper Access Control
CVE-2026-55956		 CWE-284 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955		 CWE-294 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 6 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276		 CWE-670 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434		 CWE-295 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404		 CWE-670 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229		 CWE-79 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135035 - Integer overflow
CVE-2026-54920		 CWE-190 Low
No
No
 - 23.06.2026 SB2026062311
SB2026072260
SB2026072261
#VU131788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-44172		 CWE-89 Medium
No
No
 - 19.05.2026 SB2026051914
SB20260717103
SB20260721154
and 2 more
#VU128578 - Out-of-bounds write
CVE-2026-42015		 CWE-787 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128577 - Out-of-bounds read
CVE-2026-5260		 CWE-125 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 17 more
#VU128576 - Use After Free
CVE-2026-42014		 CWE-416 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128575 - Improper Certificate Validation
CVE-2026-42013		 CWE-295 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128573 - Improper Certificate Validation
CVE-2026-42011		 CWE-295 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 12 more
#VU128572 - Improper Certificate Validation
CVE-2026-3833		 CWE-295 Medium
No
No
 - 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 17 more
#VU127691 - Improper control of a resource through its lifetime
CVE-2026-31462		 CWE-664 Low
No
No
 - 24.04.2026 SB20260424271
SB20260513116
SB2026070835
and 6 more
#VU124919 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-23451		 CWE-835 Low
No
No
 - 06.04.2026 SB2026040677
SB2026070835
SB2026070840
and 5 more
#VU124193 - Out-of-bounds read
CVE-2026-23255		 CWE-125 Low
No
No
 - 20.03.2026 SB2026032098
SB2026041129
SB2026041130
and 18 more
#VU120360 - Missing release of memory after effective lifetime
CVE-2023-53995		 CWE-401 Low
No
No
 - 26.12.2025 SB20251226101
SB2026012390
SB2026012633
and 3 more
#VU107932 - Improper input validation
CVE-2024-58251		 CWE-20 Low
No
No
 - 25.04.2025 SB2025042503
SB2025092660
SB2025110432
and 7 more
#VU105624 - Premature Release of Resource During Expected Lifetime
CVE-2025-24912		 CWE-826 Medium
No
No
 - 12.03.2025 SB2025031214
SB2025032192
SB2026022853
and 4 more


Showing elements 61 - 80 out of 3012