What’s Vulnerable › Products
SUSE Linux Enterprise Server vulnerabilities
476 known vulnerabilities, 20 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your SUSE Linux Enterprise Server version is affected
Exploited SUSE Linux Enterprise Server vulnerabilities
- CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
- CVE-2015-3306 — ProFTPD Improper Access Control Vulnerability
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2023-29552 — Service Location Protocol (SLP) Denial-of-Service Vulnerability
- CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
- CVE-2010-3904 — Linux Kernel Improper Input Validation Vulnerability
- CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2015-4495 — Mozilla Firefox Security Feature Bypass Vulnerability
- CVE-2014-3153 — Linux Kernel Privilege Escalation Vulnerability
- CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability
- CVE-2013-1690 — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
- CVE-2012-1823 — PHP-CGI Query String Parameter Vulnerability
- CVE-2015-4902 — Oracle Java SE Integrity Check Vulnerability
- CVE-2015-2590 — Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
- CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- CVE-2011-3544 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- CVE-2016-3718 — ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
- CVE-2016-3715 — ImageMagick Arbitrary File Deletion Vulnerability
Latest SUSE Linux Enterprise Server vulnerabilities
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (CVSS 7.8) — exploited
- CVE-2026-25702 — nftables disabled due to incorrect kernel backport (CVSS 9.8)
- CVE-2024-46956 — (CVSS 7.8)
- CVE-2024-46955 — (CVSS 5.5)
- CVE-2024-46953 — (CVSS 7.8)
- CVE-2024-46951 — (CVSS 7.8)
- CVE-2023-29552 — Service Location Protocol (SLP) Denial-of-Service Vulnerability (CVSS 7.5) — exploited
- CVE-2023-23005 — (CVSS 5.5)
- CVE-2022-45153 — saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls (CVSS 7.8)
- CVE-2022-31252 — permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() (CVSS 4.4)
- CVE-2015-1931 — (CVSS 5.5)
- CVE-2022-27239 — (CVSS 7.8)
- CVE-2021-45082 — (CVSS 7.8)
- CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability (CVSS 7.8) — exploited
- CVE-2002-20001 — (CVSS 7.5)
- CVE-2021-32000 — clone-master-clean-up: dangerous file system operations (CVSS 7.1)
- CVE-2018-10195 — (CVSS 7.1)
- CVE-2020-8025 — outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues (CVSS 9.3)
- CVE-2020-8013 — permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim (CVSS 2.5)
- CVE-2019-18903 — wicked: Use-after-free when receiving invalid DHCP6 IA_PD option (CVSS 9.8)
- CVE-2019-18902 — wicked: Use-after-free when receiving invalid DHCP6 client options (CVSS 9.8)
- CVE-2019-18901 — mysql-systemd-helper allows setting 640 permissions of arbitrary files (CVSS 5.5)
- CVE-2019-18897 — Local privilege escalation from user salt to root (CVSS 7.8)
- CVE-2014-1947 — (CVSS 7.8)
- CVE-2006-7246 — (CVSS 6.8)