Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12 SP3

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications 12
Version: SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 239
Public exploits: 18
Known exploited (KEV): 6

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 12 version SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 is affected by 239 vulnerabilities: 3 critical, 21 high, 136 medium, 79 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149936 - Exposure of sensitive information to an unauthorized actor
CVE-2026-49853		 CWE-200 Low
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 6 more
#VU149935 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49855		 CWE-409 Medium
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 5 more
#VU149934 - Buffer over-read
CVE-2026-49854		 CWE-126 Medium
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 4 more
#VU144224 - Improper Handling of Exceptional Conditions
CVE-2026-27448		 CWE-755 Medium
No
No
 - 18.08.2026 SB2026081870
SB2026081877
SB2026081878
and 21 more
#VU144104 - Buffer overflow
CVE-2026-27459		 CWE-120 High
No
No
 - 18.08.2026 SB2026081845
SB2026081847
SB2026081877
and 17 more
#VU136685 - Insecure Temporary File
CVE-2026-25645		 CWE-377 Low
No
No
 - 02.07.2026 SB2026070223
SB2026070226
SB2026070229
and 18 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 - 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 43 more
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 - 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU128147 - Resource exhaustion
CVE-2026-31958		 CWE-400 Medium
No
No
 - 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597		 CWE-345 Medium
No
No
 - 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU125945 - Improper input validation
CVE-2026-34986		 CWE-20 Medium
No
No
 - 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 74 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724		 CWE-644 Low
No
No
 - 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725		 CWE-834 Low
No
No
 - 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119233 - Resource exhaustion
CVE-2025-13836		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 90 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 - 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 111 more
#VU54520 - Improper input validation
CVE-2020-14343		 CWE-20 High
Public exploit available
No
 - 04.07.2021 SB2021070403
SB2021070404
SB2022042259
and 18 more
#VU25823 - Improper input validation
CVE-2020-1747		 CWE-20 High
No
No
 - 09.03.2020 SB2020030903
SB2020041201
SB2020051129
and 22 more


Showing elements 1 - 20 out of 239