Known vulnerabilities in Web and Scripting Module 15-SP7 - page 2

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 138
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP7 Web and Scripting Module 15-SP7 is affected by 138 vulnerabilities: 12 high, 84 medium, 42 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146518 - Improper input validation
CVE-2026-54272		 CWE-20 Medium
No
No
 - 31.08.2026 SB20260831108
SB20260831126
SB20260831127
and 3 more
#VU146003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-84361		 CWE-78 High
No
No
 - 27.08.2026 SB20260827147
SB2026090852
SB2026093048
#VU145388 - Insufficient Session Expiration
CVE-2026-73180		 CWE-613 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145387 - Missing release of memory after effective lifetime
CVE-2026-68763		 CWE-401 Medium
No
No
 - 26.08.2026 SB2026082616
SB2026091634
SB2026091642
and 4 more
#VU145386 - Improper Authentication
CVE-2026-68569		 CWE-287 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145385 - Improper Access Control
CVE-2026-68525		 CWE-284 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145384 - Improper Access Control
CVE-2026-66422		 CWE-284 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145383 - Off-by-one Error
CVE-2026-65927		 CWE-193 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145382 - Authentication Bypass by Capture-replay
CVE-2026-65905		 CWE-294 Low
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU145381 - Improper Access Control
CVE-2026-65637		 CWE-284 Medium
No
No
 - 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 1 more
#VU140038 - Resource exhaustion
CVE-2026-56846		 CWE-400 Medium
No
No
 - 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140039 - Use After Free
CVE-2026-56848		 CWE-416 Medium
No
No
 - 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140040 - Improper Access Control
CVE-2026-58043		 CWE-284 Low
No
No
 - 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 9 more
#VU140041 - Authentication Bypass by Primary Weakness
CVE-2026-56850		 CWE-305 Low
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 5 more
#VU140042 - Improper Certificate Validation
CVE-2026-58040		 CWE-295 Medium
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU140044 - Improper input validation
CVE-2026-58042		 CWE-20 Medium
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU140046 - Improper Access Control
CVE-2026-56847		 CWE-284 Low
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 2 more
#VU140047 - Improper Access Control
CVE-2026-58039		 CWE-284 Low
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 2 more
#VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-58044		 CWE-444 Medium
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU139938 - Allocation of Resources Without Limits or Throttling
CVE-2026-66299		 CWE-770 Medium
No
No
 - 28.07.2026 SB20260728136
SB2026080742
SB20260921191
and 1 more


Showing elements 21 - 40 out of 138