Known vulnerabilities in Web and Scripting Module 15-SP6

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 47
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP6 Web and Scripting Module 15-SP6 is affected by 47 vulnerabilities: 1 critical, 5 high, 31 medium, 10 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 - 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Public exploit available
No
 - 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 - 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU112276 - Resource exhaustion
CVE-2025-53506		 CWE-400 Medium
No
No
 - 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 41 more
#VU112275 - Resource Management Errors
CVE-2025-52520		 CWE-399 Medium
No
No
 - 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 42 more
#VU112274 - Improper input validation
CVE-2025-52434		 CWE-20 Medium
No
No
 - 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125		 CWE-424 Medium
No
No
 - 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU109243 - Missing release of memory after effective lifetime
CVE-2025-23165		 CWE-401 Low
No
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 17 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Public exploit available
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 9 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 28 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Public exploit available
No
 - 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Public exploit available
No
 - 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105644 - Improper input validation
CVE-2025-1217		 CWE-20 Medium
No
No
 - 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105643 - Improper input validation
CVE-2025-1734		 CWE-20 Medium
No
No
 - 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105642 - Improper input validation
CVE-2025-1861		 CWE-20 Low
No
No
 - 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105641 - Improper Authentication
CVE-2025-1736		 CWE-287 Medium
No
No
 - 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Public exploit available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 - 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more


Showing elements 1 - 20 out of 47