Known vulnerabilities in SUSE Manager Proxy

Vendor: SUSE
Software: SUSE Manager Proxy
Software CPE: cpe:2.3:o:suse:suse_manager_proxy:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 6824
Public exploits: 207
Known exploited (KEV): 70
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Proxy SUSE Manager Proxy is affected by 6824 known vulnerabilities: 41 critical, 741 high, 1577 medium, 4465 low Critical High Medium Low

Vulnerabilities (6824)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949		 CWE-787 Medium
No
No
 - 28.07.2026 -
#VU139942 - Out-of-bounds read
CVE-2026-58216		 CWE-125 Low
No
No
 - 28.07.2026 -
#VU139943 - Resource exhaustion
CVE-2026-58218		 CWE-400 Medium
No
No
 - 28.07.2026 -
#VU139944 - Improper Access Control
CVE-2026-58221		 CWE-284 Medium
No
No
 - 28.07.2026 -
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222		 CWE-89 Low
No
No
 - 28.07.2026 -
#VU139946 - Improper input validation
CVE-2026-58224		 CWE-20 Medium
No
No
 - 28.07.2026 -
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779		 CWE-732 Low
No
No
 - 21.07.2026 -
#VU133996 - Improper Access Control
CVE-2026-54279		 CWE-284 Medium
No
No
 - 09.06.2026 -
#VU133994 - Improper input validation
CVE-2026-54277		 CWE-20 Medium
No
No
 - 09.06.2026 -
#VU133993 - Resource exhaustion
CVE-2026-54278		 CWE-400 Medium
No
No
 - 09.06.2026 -
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 -
#VU133991 - Improper Resource Shutdown or Release
CVE-2026-54280		 CWE-404 Medium
No
No
 - 09.06.2026 -
#VU133990 - Improper Certificate Validation
CVE-2026-54275		 CWE-295 Medium
No
No
 - 09.06.2026 -
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 - 09.06.2026 -
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 -
#VU131979 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-44405		 CWE-327 Low
No
No
 - 20.05.2026 -
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 - 26.04.2026 -
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 - 26.04.2026 -
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 - 26.04.2026 -
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 - 26.04.2026 -


Showing elements 1 - 20 out of 6824