Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 LTSS - page 17

Vendor: SUSE
Version: LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Total vulnerabilities: 4395
Public exploits: 101
Known exploited (KEV): 32

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 version LTSS SUSE Linux Enterprise Server 15 SP5 LTSS is affected by 4395 vulnerabilities: 20 critical, 511 high, 1162 medium, 2702 low Critical High Medium Low

Vulnerabilities (4395)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144224 - Improper Handling of Exceptional Conditions
CVE-2026-27448
CWE-755 Medium
No
No
- 18.08.2026 SB2026081870
SB2026081877
SB2026081878
and 21 more
#VU144104 - Buffer overflow
CVE-2026-27459
CWE-120 High
No
No
- 18.08.2026 SB2026081845
SB2026081847
SB2026081877
and 17 more
#VU144098 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-74951
CWE-1021 Low
No
No
- 18.08.2026 SB2026081838
SB2026082141
SB20260824266
#VU144100 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-74975
CWE-451 Low
No
No
- 18.08.2026 SB2026081838
SB2026082141
SB20260824266
#VU144101 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-74980
CWE-1021 Low
No
No
- 18.08.2026 SB2026081838
SB2026082141
SB20260824266
#VU144102 - Memory corruption
CVE-2026-74989
CWE-119 Medium
No
No
- 18.08.2026 SB2026081838
SB2026081989
SB2026082141
and 1 more
#VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34714
CWE-78 Low
No
No
- 17.08.2026 SB2026081760
SB2026081761
SB2026081762
and 6 more
#VU141560 - Improper Access Control
CVE-2025-60876
CWE-284 Medium
No
No
- 12.08.2026 SB2026081244
SB2026081245
SB2026081252
and 9 more
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
- 13.07.2026 SB2026071348
SB2026081819
SB2026083180
and 2 more
#VU134752 - Permissive List of Allowed Inputs
CVE-2026-11525
CWE-183 Low
No
No
- 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131
CWE-362 Low
No
No
- 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU126388 - Uncaught Exception
CVE-2025-59465
CWE-248 Medium
No
No
- 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 23 more
#VU126389 - Uncaught Exception
CVE-2025-59466
CWE-248 Medium
No
No
- 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34982
CWE-78 High
No
No
- 07.04.2026 SB2026040792
SB2026041439
SB20260417153
and 16 more
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412
CWE-78 Medium
No
No
- 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 24 more
#VU119383 - Use After Free
CVE-2025-62408
CWE-416 Medium
No
No
- 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 5 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167
CWE-444 Medium
Public exploit available
No
- 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 12 more
#VU109241 - Error Handling
CVE-2025-23166
CWE-388 Medium
No
No
- 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU107931 - Improper input validation
CVE-2025-46394
CWE-20 Medium
No
No
- 25.04.2025 SB2025042503
SB2025072544
SB2025072545
and 8 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150
CWE-330 Medium
No
No
- 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more


Showing elements 321 - 340 out of 4395