Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 15 - page 69

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications 15
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 13007
Public exploits: 249
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 is affected by 13007 known vulnerabilities: 36 critical, 934 high, 2278 medium, 9757 low Critical High Medium Low

Vulnerabilities (13007)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133901 - Improper Privilege Management
CVE-2026-44119		 CWE-269 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 13 more
#VU133902 - Out-of-bounds read
CVE-2026-43951		 CWE-125 Medium
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 21 more
#VU133903 - Heap-based Buffer Overflow
CVE-2026-42536		 CWE-122 High
No
No
 - 08.06.2026 SB2026060493
SB20260624100
SB20260624101
and 15 more
#VU133904 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42535		 CWE-22 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 13 more
#VU133905 - Heap-based Buffer Overflow
CVE-2026-34356		 CWE-122 High
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 18 more
#VU133906 - Buffer overflow
CVE-2026-34355		 CWE-120 Medium
No
No
 - 08.06.2026 SB2026060493
SB20260624100
SB20260624101
and 15 more
#VU133907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-29170		 CWE-79 Medium
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 13 more
#VU133908 - Use After Free
CVE-2026-29167		 CWE-416 Low
No
No
 - 08.06.2026 SB2026060493
SB2026062422
SB20260624100
and 16 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more


Showing elements 1361 - 1380 out of 13007