Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 - page 33

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Total vulnerabilities: 3519
Public exploits: 83
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server 15 SP5 is affected by 3519 known vulnerabilities: 18 critical, 380 high, 743 medium, 2378 low Critical High Medium Low

Vulnerabilities (3519)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545
CWE-305 Medium
No
No
- 29.04.2026 -
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429
CWE-200 Medium
No
No
- 29.04.2026 -
#VU128455 - Origin Validation Error
CVE-2026-6276
CWE-346 Medium
No
No
- 29.04.2026 -
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253
CWE-522 Medium
No
No
- 29.04.2026 -
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873
CWE-319 Medium
No
No
- 29.04.2026 -
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205
CWE-22 Medium
No
No
- 28.04.2026 -
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
- 22.04.2026 -
#VU126759 - Improper input validation
CVE-2026-34282
CWE-20 Medium
No
No
- 22.04.2026 -
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
- 22.04.2026 -
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
- 22.04.2026 -
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
- 22.04.2026 -
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
- 22.04.2026 -
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
- 22.04.2026 -
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
- 14.04.2026 -
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795
CWE-226 High
No
No
- 11.04.2026 -
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941
CWE-444 High
No
No
- 10.04.2026 -
#VU125772 - Relative Path Traversal
CVE-2026-21620
CWE-23 Low
No
No
- 10.04.2026 -
#VU125602 - Use After Free
CVE-2026-34757
CWE-416 Low
No
No
- 09.04.2026 -
#VU123884 - Integer overflow
CVE-2026-23865
CWE-190 Medium
No
No
- 11.03.2026 -
#VU19180 - Improper input validation
CVE-2017-12652
CWE-20 Low
No
No
- 15.07.2019 -


Showing elements 641 - 660 out of 3519