Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 - page 7

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3512
Public exploits: 83
Known exploited (KEV): 24
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server 15 SP5 is affected by 3512 known vulnerabilities: 18 critical, 380 high, 742 medium, 2372 low Critical High Medium Low

Vulnerabilities (3512)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 - 22.07.2026 -
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 - 22.07.2026 -
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 - 22.07.2026 -
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 - 22.07.2026 -
#VU139114 - Heap-based Buffer Overflow
CVE-2026-34743		 CWE-122 Medium
No
No
 - 22.07.2026 -
#VU138427 - Integer overflow
CVE-2026-56001		 CWE-190 Low
No
No
 - 20.07.2026 -
#VU133996 - Improper Access Control
CVE-2026-54279		 CWE-284 Medium
No
No
 - 09.06.2026 -
#VU133994 - Improper input validation
CVE-2026-54277		 CWE-20 Medium
No
No
 - 09.06.2026 -
#VU133993 - Resource exhaustion
CVE-2026-54278		 CWE-400 Medium
No
No
 - 09.06.2026 -
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 -
#VU133991 - Improper Resource Shutdown or Release
CVE-2026-54280		 CWE-404 Medium
No
No
 - 09.06.2026 -
#VU133990 - Improper Certificate Validation
CVE-2026-54275		 CWE-295 Medium
No
No
 - 09.06.2026 -
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 - 09.06.2026 -
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 -
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 -
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 -
#VU131788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-44172		 CWE-89 Medium
No
No
 - 19.05.2026 -
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 -
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 -
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 -


Showing elements 121 - 140 out of 3512