Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 12 SP4

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications 12
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_12:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 437
Public exploits: 25
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 12 version SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 is affected by 437 vulnerabilities: 4 critical, 67 high, 190 medium, 176 low Critical High Medium Low

Vulnerabilities (437)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136685 - Insecure Temporary File
CVE-2026-25645		 CWE-377 Low
No
No
 - 02.07.2026 SB2026070223
SB2026070226
SB2026070229
and 11 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 - 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 30 more
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 - 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 68 more
#VU128147 - Resource exhaustion
CVE-2026-31958		 CWE-400 Medium
No
No
 - 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 34 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597		 CWE-345 Medium
No
No
 - 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU125945 - Improper input validation
CVE-2026-34986		 CWE-20 Medium
No
No
 - 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 65 more
#VU122809 - Out-of-bounds write
CVE-2026-25506		 CWE-787 Low
No
No
 - 13.02.2026 SB2026021332
SB2026021333
SB2026021338
and 21 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU120977 - Cryptographic Issues
CVE-2025-15444		 CWE-310 Medium
No
No
 - 06.01.2026 SB2026010618
SB2026012162
SB2026012917
and 3 more
#VU120975 - Cryptographic Issues
CVE-2025-69277		 CWE-310 Medium
No
No
 - 06.01.2026 SB2026010617
SB2026010621
SB2026010861
and 17 more
#VU120229 - Improper Authentication
CVE-2025-62349		 CWE-287 Low
No
No
 - 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-62348		 CWE-94 Medium
No
No
 - 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724		 CWE-644 Low
No
No
 - 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725		 CWE-834 Low
No
No
 - 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726		 CWE-834 Medium
No
No
 - 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU119233 - Resource exhaustion
CVE-2025-13836		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU106004 - Memory corruption
CVE-2025-1365		 CWE-119 Medium
No
No
 - 25.03.2025 SB2025032513
SB2025032515
SB2025032519
and 2 more
#VU105535 - Command injection
CVE-2025-24049		 CWE-77 Low
No
No
 - 11.03.2025 SB2025031172
SB2025032640
SB2025040993
and 2 more


Showing elements 1 - 20 out of 437