SUSE Linux vulnerabilities
5 vulnerabilities
Known vulnerabilities in SUSE Linux products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.
Products
15- SMT3 vulnerabilities
- Enterprise Desktop1 vulnerabilities
- Enterprise High Performance Computing1 vulnerabilities
- Enterprise High Performance Computing (Hpc)1 vulnerabilities
- Enterprise Module For Dev Tools1 vulnerabilities
- Enterprise Module For Development Tools1 vulnerabilities
- Enterprise Module For Package Hub1 vulnerabilities
- Enterprise Server1 vulnerabilities
- Enterprise Server For SAP Applications1 vulnerabilities
- Opensuse Leap1 vulnerabilities
- Opensuse Shim1 vulnerabilities
- SUSE Manager Proxy1 vulnerabilities
- SUSE Manager Retail Branch Server1 vulnerabilities
- SUSE Manager Server1 vulnerabilities
- SUSE Manager Server LTS1 vulnerabilities
CVE-2018-12471suse linuxsmt+1
EPSS score1.53%
A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.CVE-2018-12470suse linuxsmt+1EPSS score1.99%
A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.CVE-2018-12472susesmt&distro=SUSE Enterprise Storage 4+11EPSS score1.53%
A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.CVE-2025-8671alpinelighttpd+29EPSS score3.62%
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.CVE-2026-8863baramundi softwarebaramundi management suite+12EPSS score0.11%
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.