Known vulnerabilities in Web and Scripting Module 15-SP7

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 138
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP7 Web and Scripting Module 15-SP7 is affected by 138 vulnerabilities: 12 high, 84 medium, 42 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151966 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-86247		 CWE-362 Medium
No
No
 - 24.09.2026 SB2026092480
SB2026100975
SB2026100977
#VU151965 - Insecure Default Initialization of Resource
CVE-2026-86246		 CWE-1188 Low
No
No
 - 24.09.2026 SB2026092480
SB2026100975
SB2026100977
#VU151964 - Out-of-bounds read
CVE-2026-86243		 CWE-125 Medium
No
No
 - 24.09.2026 SB2026092480
SB2026100975
SB2026100977
#VU151838 - Improper input validation
CVE-2026-87022		 CWE-20 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
#VU151839 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-86350		 CWE-444 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151840 - Improper Certificate Validation
CVE-2026-86248		 CWE-295 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
#VU151841 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79677		 CWE-362 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151842 - Resource exhaustion
CVE-2026-78437		 CWE-400 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151843 - Resource exhaustion
CVE-2026-78383		 CWE-400 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151844 - Resource exhaustion
CVE-2026-77791		 CWE-400 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151845 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-77762		 CWE-362 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151846 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-77756		 CWE-444 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151847 - Improper Access Control
CVE-2026-76183		 CWE-284 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151848 - Improper Authentication
CVE-2026-75973		 CWE-287 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
#VU151849 - Improper Certificate Validation
CVE-2026-73581		 CWE-295 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU146004 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-59944		 CWE-59 Medium
No
No
 - 27.08.2026 SB20260827147
SB20260827152
SB20260827153
and 7 more
#VU145380 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-65183		 CWE-367 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145379 - Improper Access Control
CVE-2026-65182		 CWE-284 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 3 more
#VU131373 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45793		 CWE-200 Medium
No
No
 - 13.05.2026 SB2026051396
SB20260721146
SB2026093043
and 1 more


Showing elements 1 - 20 out of 138