Known vulnerabilities in Web and Scripting Module

Vendor: SUSE
Software: Web and Scripting Module
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 190
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Web and Scripting Module Web and Scripting Module is affected by 190 known vulnerabilities: 2 critical, 17 high, 126 medium, 45 low Critical High Medium Low

Vulnerabilities (190)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140833 - Uncontrolled Recursion
CVE-2026-7260		 CWE-674 Low
No
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 8 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543		 CWE-89 High
Available
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 8 more
#VU140831 - Improper input validation
CVE-2026-9672		 CWE-20 Medium
No
No
 - 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 5 more
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084		 CWE-1059 Low
No
No
 - 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 4 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083		 CWE-180 Medium
No
No
 - 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 4 more
#VU137285 - Uncaught Exception
CVE-2026-12184		 CWE-248 Medium
No
No
 - 09.07.2026 SB2026051001
SB2026071918
SB2026071919
and 5 more
#VU137286 - Memory corruption
CVE-2026-14355		 CWE-119 Medium
No
No
 - 09.07.2026 SB2026070955
SB2026070956
SB2026071356
and 17 more
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU135862 - Improper Access Control
CVE-2026-55956		 CWE-284 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955		 CWE-294 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 6 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276		 CWE-670 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434		 CWE-295 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404		 CWE-670 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229		 CWE-79 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU131373 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45793		 CWE-200 Medium
No
No
 - 13.05.2026 SB2026051396
SB20260721146
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498		 CWE-200 Low
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 18 more
#VU131182 - Improper input validation
CVE-2026-41293		 CWE-20 Medium
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more


Showing elements 1 - 20 out of 190