Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 15
Vendor:
SUSE
Software CPE:
cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:*:*:*:*:*:*:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
12595
Public exploits:
234
Known exploited (KEV):
54
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (12595)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140622 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-39822 |
CWE-59 | Low | - | 31.07.2026 | - | ||
| #VU140621 - Exposure of sensitive information to an unauthorized actor CVE-2026-42505 |
CWE-200 | Medium | - | 31.07.2026 | - | ||
| #VU140620 - Resource exhaustion CVE-2026-27145 |
CWE-400 | Medium | - | 31.07.2026 | - | ||
| #VU140619 - Resource exhaustion CVE-2026-42504 |
CWE-400 | Medium | - | 31.07.2026 | - | ||
| #VU140618 - Improper Output Neutralization for Logs CVE-2026-42507 |
CWE-117 | Medium | - | 31.07.2026 | - | ||
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | - | 31.07.2026 | - | ||
| #VU140606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-32289 |
CWE-79 | Medium | - | 31.07.2026 | - | ||
| #VU140605 - Improper Certificate Validation CVE-2026-33810 |
CWE-295 | Medium | - | 31.07.2026 | - | ||
| #VU140604 - Memory corruption CVE-2026-27144 |
CWE-119 | Low | - | 31.07.2026 | - | ||
| #VU140603 - Integer overflow CVE-2026-27143 |
CWE-190 | Low | - | 31.07.2026 | - | ||
| #VU140602 - Allocation of Resources Without Limits or Throttling CVE-2026-32288 |
CWE-770 | Medium | - | 31.07.2026 | - | ||
| #VU140601 - Protection Mechanism Failure CVE-2026-27140 |
CWE-693 | High | - | 31.07.2026 | - | ||
| #VU140600 - Improper input validation CVE-2026-32281 |
CWE-20 | Medium | - | 31.07.2026 | - | ||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | - | 31.07.2026 | - | ||
| #VU139214 - Improper input validation CVE-2026-10723 |
CWE-20 | Medium | - | 23.07.2026 | - | ||
| #VU139071 - Use After Free CVE-2026-63639 |
CWE-416 | Medium | - | 22.07.2026 | - | ||
| #VU139070 - Use After Free CVE-2026-56684 |
CWE-416 | Medium | - | 22.07.2026 | - | ||
| #VU138583 - Stack-based buffer overflow CVE-2026-61548 |
CWE-121 | Medium | - | 20.07.2026 | - | ||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | - | 02.07.2026 | - | ||
| #VU134680 - UNIX Symbolic Link (Symlink) Following CVE-2026-41579 |
CWE-61 | Low | - | 16.06.2026 | - |
Showing elements 1 - 20 out of 12595