Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 15 - page 56

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 13007
Public exploits: 249
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 is affected by 13007 known vulnerabilities: 36 critical, 934 high, 2278 medium, 9757 low Critical High Medium Low

Vulnerabilities (13007)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137009 - Resource exhaustion
CVE-2026-59200
CWE-400 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137007 - Allocation of Resources Without Limits or Throttling
CVE-2026-59204
CWE-770 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072516
and 6 more
#VU137006 - Out-of-bounds read
CVE-2026-54058
CWE-125 High
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026071949
and 12 more
#VU137005 - Heap-based Buffer Overflow
CVE-2026-59197
CWE-122 High
No
No
- 07.07.2026 SB2026041113
SB2026071741
SB2026071949
and 12 more
#VU137004 - Out-of-bounds read
CVE-2026-59198
CWE-125 Medium
No
No
- 07.07.2026 SB2026041113
SB2026071741
SB2026072428
and 7 more
#VU137003 - Heap-based Buffer Overflow
CVE-2026-59199
CWE-122 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137002 - Heap-based Buffer Overflow
CVE-2026-59205
CWE-122 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU136048 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-55199
CWE-835 Medium
No
No
- 01.07.2026 SB2026070130
SB2026070134
SB2026070138
and 13 more
#VU135862 - Improper Access Control
CVE-2026-55956
CWE-284 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955
CWE-294 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 6 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815
CWE-770 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513
CWE-400 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514
CWE-93 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516
CWE-20 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517
CWE-400 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518
CWE-200 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519
CWE-113 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520
CWE-113 Medium
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525
CWE-444 Low
No
No
- 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more


Showing elements 1101 - 1120 out of 13007