Known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 15 - page 75

Vendor: SUSE
Software: SUSE Linux Enterprise Server for SAP Applications 15
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12596
Public exploits: 234
Known exploited (KEV): 54
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 is affected by 12596 known vulnerabilities: 36 critical, 883 high, 2046 medium, 9629 low Critical High Medium Low

Vulnerabilities (12596)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130763 - Resource Management Errors
CVE-2026-43284		 CWE-399 High
Available
Exploited
 - 08.05.2026 SB20260508111
SB20260508120
SB20260508121
and 70 more
#VU130759 - Resource Management Errors
CVE-2026-43500		 CWE-399 High
Available
Exploited
 - 08.05.2026 SB20260508108
SB20260508120
SB20260508121
and 31 more
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205		 CWE-22 Medium
No
No
 - 28.04.2026 SB20260428216
SB2026050603
SB2026051399
and 2 more
#VU125895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40176		 CWE-78 High
No
No
 - 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125894 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40261		 CWE-78 High
No
No
 - 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 - 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 8 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795		 CWE-226 High
No
No
 - 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 3 more
#VU124838 - Resource exhaustion
CVE-2026-34230		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124837 - Permissive Regular Expression
CVE-2026-34763		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124836 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-34786		 CWE-180 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124832 - Resource exhaustion
CVE-2026-34826		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124828 - Permissive Regular Expression
CVE-2026-34830		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124827 - Partial String Comparison
CVE-2026-34785		 CWE-187 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124826 - Resource exhaustion
CVE-2026-34829		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124823 - Interpretation Conflict
CVE-2026-26961		 CWE-436 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-26962		 CWE-93 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-28753		 CWE-93 Medium
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026041117
and 3 more
#VU124480 - Integer overflow
CVE-2026-27784		 CWE-190 High
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 16 more
#VU124478 - Heap-based Buffer Overflow
CVE-2026-27654		 CWE-122 Medium
Available
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026033174
and 16 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642		 CWE-349 Medium
No
No
 - 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 21 more


Showing elements 1481 - 1500 out of 12596