Known vulnerabilities in SUSE Linux Enterprise Server 15 SP4 - page 20

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4224
Public exploits: 103
Known exploited (KEV): 29
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP4 is affected by 4224 known vulnerabilities: 18 critical, 501 high, 1097 medium, 2607 low Critical High Medium Low

Vulnerabilities (4224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145800 - Inefficient Regular Expression Complexity
CVE-2026-87819		 CWE-1333 Medium
No
No
 - 26.08.2026 SB2026082660
SB20260921194
#VU145799 - Argument Injection or Modification
CVE-2026-87818		 CWE-88 Low
No
No
 - 26.08.2026 SB2026082660
SB20260921194
#VU145388 - Insufficient Session Expiration
CVE-2026-73180		 CWE-613 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145387 - Missing release of memory after effective lifetime
CVE-2026-68763		 CWE-401 Medium
No
No
 - 26.08.2026 SB2026082616
SB2026091634
SB2026091642
and 4 more
#VU145386 - Improper Authentication
CVE-2026-68569		 CWE-287 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145385 - Improper Access Control
CVE-2026-68525		 CWE-284 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145384 - Improper Access Control
CVE-2026-66422		 CWE-284 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145383 - Off-by-one Error
CVE-2026-65927		 CWE-193 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145382 - Authentication Bypass by Capture-replay
CVE-2026-65905		 CWE-294 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145381 - Improper Access Control
CVE-2026-65637		 CWE-284 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145380 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-65183		 CWE-367 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145379 - Improper Access Control
CVE-2026-65182		 CWE-284 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-16729		 CWE-74 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-16728		 CWE-444 Medium
No
No
 - 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU139938 - Allocation of Resources Without Limits or Throttling
CVE-2026-66299		 CWE-770 Medium
No
No
 - 28.07.2026 SB20260728136
SB2026080742
SB20260921191
and 1 more
#VU133240 - Use of Hard-coded Cryptographic Key
CVE-2026-53939		 CWE-321 High
No
No
 - 02.06.2026 SB2026060240
SB2026091601
SB20260921180
and 3 more
#VU133239 - Heap-based Buffer Overflow
CVE-2026-53938		 CWE-122 High
No
No
 - 02.06.2026 SB2026060239
SB2026091601
SB20260921180
and 11 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU119383 - Use After Free
CVE-2025-62408		 CWE-416 Medium
No
No
 - 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 4 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 - 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more


Showing elements 381 - 400 out of 4224