Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 LTSS - page 7

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP5
Version: LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3512
Public exploits: 83
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 version LTSS SUSE Linux Enterprise Server 15 SP5 LTSS is affected by 3512 vulnerabilities: 18 critical, 380 high, 742 medium, 2372 low Critical High Medium Low

Vulnerabilities (3512)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 - 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 13 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 - 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 15 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 - 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 3 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 - 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 5 more
#VU139114 - Heap-based Buffer Overflow
CVE-2026-34743		 CWE-122 Medium
No
No
 - 22.07.2026 SB2026072263
SB2026072264
SB2026072265
and 6 more
#VU138427 - Integer overflow
CVE-2026-56001		 CWE-190 Low
No
No
 - 20.07.2026 SB2026072028
SB2026072049
SB2026072059
and 7 more
#VU133996 - Improper Access Control
CVE-2026-54279		 CWE-284 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133994 - Improper input validation
CVE-2026-54277		 CWE-20 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133993 - Resource exhaustion
CVE-2026-54278		 CWE-400 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133991 - Improper Resource Shutdown or Release
CVE-2026-54280		 CWE-404 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133990 - Improper Certificate Validation
CVE-2026-54275		 CWE-295 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 SB2026060241
SB2026072492
SB2026072493
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU131788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-44172		 CWE-89 Medium
No
No
 - 19.05.2026 SB2026051914
SB20260717103
SB20260721154
and 2 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 5 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more


Showing elements 121 - 140 out of 3512