Read the docs

SUSE

Records1332All Threatist records
Exploited (KEV)50In CISA KEV
CVSS critical279CVSS 9.0–10.0
CVSS high499CVSS 7.0–8.9

Exploited now

SUSE records in CISA KEV
TI-2015-02923 ProFTPD Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-10-08TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2025-23530 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Priority CRITICAL 99KEV 2025-09-29TI-2013-00536 Adobe Flash Player Incorrect Default Permissions Vulnerability Priority CRITICAL 97KEV 2024-09-17TI-2013-00541 Adobe Flash Player Code Execution Vulnerability Priority CRITICAL 97KEV 2024-09-17

Components

Products in the NVD configurations · select one to filter the records
Linux Enterprise Server 476 records CRITICAL Linux Enterprise Desktop 462 records CRITICAL Linux Enterprise Software Development Kit 297 records CRITICAL Suse Linux 207 records HIGH Suse Linux Enterprise Server 129 records CRITICAL Linux Enterprise Workstation Extension 105 records CRITICAL Linux Enterprise 97 records CRITICAL Suse Linux Enterprise Desktop 81 records HIGH

Records

12 records in Manager Server · all components

TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669
TI-2021-02923 CVE-2021-4034 · GHSA-qgr2-xgqv-24x8

Out-of-bounds write in polkit

Priority CRITICAL 93KEV

A local privilege escalation vulnerability was found on polkit's pkexec utility.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.94921 Published 2022-01-28 Fixed CWE-787
TI-2023-08821 CVE-2023-22644 · GHSA-6q6r-hx29-59m5

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

Priority MEDIUM 43

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00456 Published 2023-09-20 Fixed in 0.0.0-20231003121714-be746957ee7c CWE-1270
TI-2022-06314 CVE-2022-21952 · GHSA-99mv-pfx6-v678

SUMA unauthenticated remote DoS via resource exhaustion

Priority LOW 36

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01546 Published 2022-06-22 Fixed in 4.1.46, 4.2.37 CWE-306
TI-2022-13281 CVE-2022-31248 · GHSA-jcvh-6rq4-c7xr

SUMA user enumeration via weak error message

Priority LOW 26

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01018 Published 2022-06-22 Fixed in 4.1.46-1, 4.2.37-1 CWE-204
TI-2022-21488 CVE-2022-43754 · GHSA-vjvm-4cfh-7m4p

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

Priority LOW 25

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-79
TI-2022-21487 CVE-2022-43753 · GHSA-c2p9-h64p-qvv4

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload

Priority LOW 22

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00884 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22
TI-2022-13288 CVE-2022-31255 · GHSA-fjgg-4cjq-r7wj

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction

Priority LOW 22

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manage…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00834 Published 2022-11-10 Fixed in 4.2.28, 4.3.39 +1 CWE-22
Open these records in search →