Known vulnerabilities in Web and Scripting Module 15-SP7 - page 3

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 83
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP7 Web and Scripting Module 15-SP7 is affected by 83 vulnerabilities: 10 high, 53 medium, 20 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131		 CWE-362 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU126387 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-55130		 CWE-59 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU126390 - Missing release of memory after effective lifetime
CVE-2025-59464		 CWE-401 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041714
SB2026041715
and 3 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 13 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125746 - Protection Mechanism Failure
CVE-2026-34486		 CWE-693 Medium
No
Exploited
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 12 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 - 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 14 more
#VU125738 - Improper input validation
CVE-2026-32990		 CWE-20 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB2026042329
and 9 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 20 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 17 more
#VU124548 - Improper Access Control
CVE-2026-21715		 CWE-284 Low
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041564
and 18 more
#VU124549 - Improper Access Control
CVE-2026-21716		 CWE-284 Low
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU124544 - Reachable Assertion
CVE-2026-21712		 CWE-617 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026041725
SB20260424153
and 2 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 19 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137		 CWE-264 Low
No
No
 - 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more


Showing elements 41 - 60 out of 83