Known vulnerabilities in Web and Scripting Module 15-SP7

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 83
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP7 Web and Scripting Module 15-SP7 is affected by 83 vulnerabilities: 10 high, 53 medium, 20 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140833 - Uncontrolled Recursion
CVE-2026-7260		 CWE-674 Low
No
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 8 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543		 CWE-89 High
Public exploit available
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 8 more
#VU140831 - Improper input validation
CVE-2026-9672		 CWE-20 Medium
No
No
 - 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 5 more
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084		 CWE-1059 Low
No
No
 - 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 4 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083		 CWE-180 Medium
No
No
 - 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 4 more
#VU137285 - Uncaught Exception
CVE-2026-12184		 CWE-248 Medium
No
No
 - 09.07.2026 SB2026051001
SB2026071918
SB2026071919
and 5 more
#VU137286 - Memory corruption
CVE-2026-14355		 CWE-119 Medium
No
No
 - 09.07.2026 SB2026070955
SB2026070956
SB2026071356
and 17 more
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 - 01.07.2026 SB2026070158
SB20260721146
#VU135862 - Improper Access Control
CVE-2026-55956		 CWE-284 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955		 CWE-294 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 6 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276		 CWE-670 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434		 CWE-295 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404		 CWE-670 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229		 CWE-79 Low
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU131373 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45793		 CWE-200 Medium
No
No
 - 13.05.2026 SB2026051396
SB20260721146
#VU131177 - Improper Access Control
CVE-2026-43515		 CWE-284 Medium
Public exploit available
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 21 more
#VU91685 - Command injection
CVE-2024-35242		 CWE-77 High
No
No
 - 11.06.2024 SB2024061107
SB2024061108
SB2024061109
and 6 more
#VU91684 - Command injection
CVE-2024-35241		 CWE-77 High
No
No
 - 11.06.2024 SB2024061107
SB2024061108
SB2024061109
and 7 more


Showing elements 1 - 20 out of 83