Known vulnerabilities in SUSE Enterprise Storage 7.1

Vendor: SUSE
Version: 7.1
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Total vulnerabilities: 3966
Public exploits: 168
Known exploited (KEV): 51

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 7.1 SUSE Enterprise Storage 7.1 is affected by 3966 vulnerabilities: 34 critical, 660 high, 1112 medium, 2159 low Critical High Medium Low

Vulnerabilities (3966)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949
CWE-787 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139942 - Out-of-bounds read
CVE-2026-58216
CWE-125 Low
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 16 more
#VU139943 - Resource exhaustion
CVE-2026-58218
CWE-400 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139944 - Improper Access Control
CVE-2026-58221
CWE-284 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222
CWE-89 Low
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139946 - Improper input validation
CVE-2026-58224
CWE-20 Medium
No
No
- 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779
CWE-732 Low
No
No
- 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 9 more
#VU135854 - Improper input validation
CVE-2026-57231
CWE-20 Medium
No
No
- 29.06.2026 SB20260629136
SB2026081031
SB2026082018
and 1 more
#VU134854 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-55686
CWE-59 Medium
No
No
- 18.06.2026 SB2026061840
SB2026081031
SB2026082018
and 1 more
#VU134680 - UNIX Symbolic Link (Symlink) Following
CVE-2026-41579
CWE-61 Low
No
No
- 16.06.2026 SB2026061687
SB2026072513
SB2026073105
and 3 more
#VU132341 - Improper Access Control
CVE-2026-2340
CWE-284 Low
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238
CWE-476 Medium
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408
CWE-77 High
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480
CWE-77 High
No
No
- 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU120612 - Out-of-bounds read
CVE-2025-47914
CWE-125 Medium
No
No
- 29.12.2025 SB2025122903
SB2025122904
SB2025123103
and 20 more
#VU116764 - Out-of-bounds read
CVE-2023-53659
CWE-125 Low
No
No
- 08.10.2025 SB2025100866
SB2025111182
SB2025111740
and 10 more
#VU115443 - NULL Pointer Dereference
CVE-2022-50280
CWE-476 Low
No
No
- 16.09.2025 SB20250916182
SB2025112471
SB2025122307
and 5 more
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524
CWE-113 Low
No
No
- 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 8 more
#VU53311 - Improper input validation
CVE-2021-3531
CWE-20 Medium
No
No
- 17.05.2021 SB2021051713
SB2021051423
SB2021051424
and 5 more
#VU53310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3509
CWE-79 Low
No
No
- 17.05.2021 SB2021051712
SB2021051423
SB2021060252
and 2 more


Showing elements 1 - 20 out of 3966