How many SUSE linux enterprise server CVEs are in CISA KEV?

Yes — 20 of SUSE linux enterprise server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of SUSE linux enterprise server are affected?

10 distinct SUSE linux enterprise server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SUSE linux enterprise server CVEs?

SUSE linux enterprise server's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-476 (NULL Pointer Dereference).

How many critical SUSE linux enterprise server vulnerabilities are there?

SUSE linux enterprise server has 125 critical and 105 high-severity CVEs.

What is the average severity of SUSE linux enterprise server CVEs?

The average CVSS base score across SUSE linux enterprise server's scored CVEs is 6.5.

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Suse
Linux Enterprise Server

RadicalNotion.AI

We do not sell or share your personal information.

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Suse
Linux Enterprise Server

SUSE linux enterprise server Vulnerabilities: CVEs, CISA KEV & Security Advisories

SUSE

502 CVEs

20 in CISA KEV

SUSE linux enterprise server Vulnerabilities

Name: SUSE linux enterprise server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for linux enterprise server by SUSE.

502

Total CVEs

Published

In CISA KEV

Exploited in the wild

165

Public exploits

PoC or exploit code

6.5

Avg CVSS

2007–2026

Last updated April 22, 2026

Overview

SUSE linux enterprise server has 502 published CVE records since 2007, of which 20 are in CISA's Known Exploited Vulnerabilities catalog and 165 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of SUSE linux enterprise server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical125

High105

Medium218

Low54

In CISA’s Known Exploited Vulnerabilities catalog

20 of SUSE linux enterprise server's CVEs are confirmed exploited in the wild.

Public exploits

165

165 of SUSE linux enterprise server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every SUSE linux enterprise server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

11 <= v <= 11345 CVEs
10 <= v <= 10200 CVEs
12 <= v <= 12159 CVEs
9 <= v <= 943 CVEs
15 <= v <= 1530 CVEs
11.0 <= v <= 11.010 CVEs
8 <= v <= 84 CVEs
12.0 <= v <= 12.02 CVEs
16.0 <= v <= 16.01 CVE
16.1 <= v <= 16.11 CVE

Find a version

502 CVEs

Sort

crypto: algif_aead - Revert to operating out-of-place
CVE-2026-31431
CISA KEV
Public exploit
Patch
Workaround
CWE-669
Added to CISA KEV 2026-05-01
High · CVSS 8.5
EPSS 3.4% (89th pct)2026-04-22
nftables disabled due to incorrect kernel backport
CVE-2026-25702
Patch
CWE-284
Critical · CVSS 9.8
EPSS 0.4% (30th pct)2026-03-05
High vulnerability · 2024-11-10
CVE-2024-46956
Patch
CWE-125
High · CVSS 7.8
EPSS 0.4% (31th pct)2024-11-10
Medium vulnerability · 2024-11-10
CVE-2024-46955
Patch
CWE-125
Medium · CVSS 5.5
EPSS 0.3% (21th pct)2024-11-10
High vulnerability · 2024-11-10
CVE-2024-46953
Patch
CWE-190
High · CVSS 7.8
EPSS 0.4% (31th pct)2024-11-10
High vulnerability · 2024-11-10
CVE-2024-46951
Patch
CWE-824
High · CVSS 7.8
EPSS 0.4% (28th pct)2024-11-10
High vulnerability · 2023-04-25
CVE-2023-29552
CISA KEV
Public exploit
Patch
Added to CISA KEV 2023-11-08
High · CVSS 8.7
EPSS 64.0% (99th pct)2023-04-25
Medium vulnerability · 2023-03-01
CVE-2023-23005
Patch
CWE-476
Medium · CVSS 5.5
EPSS 0.3% (18th pct)2023-03-01
supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
CVE-2022-45154
Public exploit
Patch
CWE-312
Medium · CVSS 5.5
EPSS 0.2% (6th pct)2023-02-15
High vulnerability · 2023-02-15
CVE-2022-45153
Public exploit
Patch
CWE-276
High · CVSS 7.8
EPSS 0.2% (12th pct)2023-02-15
rmt-server-pubcloud allows to escalate from user _rmt to root
CVE-2022-31254
Public exploit
Patch
CWE-276
High · CVSS 7.8
EPSS 0.2% (15th pct)2023-02-07
Medium vulnerability · 2022-10-06
CVE-2022-31252
Patch
CWE-863
Medium · CVSS 4.4
EPSS 0.1% (4th pct)2022-10-06
High vulnerability · 2022-04-27
CVE-2022-27239
Patch
CWE-787
High · CVSS 7.8
EPSS 0.6% (46th pct)2022-04-27
Medium vulnerability · 2022-03-16
CVE-2021-46705
Public exploit
Patch
CWE-377
Medium · CVSS 5.1
EPSS 0.2% (14th pct)2022-03-16
Command Injection in Cobbler
CVE-2021-45082
Public exploit
Patch
CWE-77
High · CVSS 8.5
EPSS 0.5% (41th pct)2022-02-18
High vulnerability · 2022-01-28
CVE-2021-4034
CISA KEV
Public exploit
Patch
CWE-787
Added to CISA KEV 2022-06-27
High · CVSS 8.5
EPSS 94.9% (100th pct)2022-01-28
High vulnerability · 2021-11-11
CVE-2002-20001
Public exploit
Patch
CWE-400
High · CVSS 7.5
EPSS 24.6% (98th pct)2021-11-11
High vulnerability · 2021-07-28
CVE-2021-32000
Public exploit
Patch
CWE-59
High · CVSS 7.1
EPSS 0.3% (21th pct)2021-07-28
cryptctl: client side password hashing is equivalent to clear text password storage
CVE-2019-18906
Patch
CWE-287
Critical · CVSS 9.8
EPSS 1.1% (65th pct)2021-06-30
High vulnerability · 2021-06-30
CVE-2021-25321
Public exploit
Patch
CWE-61
High · CVSS 7.8
EPSS 0.4% (37th pct)2021-06-30
High vulnerability · 2021-06-10
CVE-2021-31998
Public exploit
Patch
CWE-276
High · CVSS 7.8
EPSS 0.3% (23th pct)2021-06-10
High vulnerability · 2021-06-02
CVE-2018-10195
Patch
CWE-190
High · CVSS 7.1
EPSS 0.4% (32th pct)2021-06-02
cups: ownership of /var/log/cups allows the lp user to create files as root
CVE-2021-25317
Patch
CWE-276
Low · CVSS 3.3
EPSS 0.3% (18th pct)2021-05-05
Low vulnerability · 2021-04-14
CVE-2021-25316
Public exploit
Patch
CWE-377
Low · CVSS 3.3
EPSS 0.3% (23th pct)2021-04-14
High vulnerability · 2021-02-11
CVE-2020-8027
Public exploit
Patch
CWE-377
High · CVSS 7.3
EPSS 0.3% (22th pct)2021-02-11
High vulnerability · 2020-09-01
CVE-2020-8023
Public exploit
Patch
CWE-349
High · CVSS 7.8
EPSS 0.4% (33th pct)2020-09-01
outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
CVE-2020-8025
Public exploit
Patch
CWE-279
Critical · CVSS 9.3
EPSS 0.5% (40th pct)2020-08-07
Critical vulnerability · 2020-06-29
CVE-2019-3681
Public exploit
Patch
CWE-73
Critical · CVSS 9.8
EPSS 1.4% (72th pct)2020-06-29
High vulnerability · 2020-06-29
CVE-2020-8019
Public exploit
Patch
CWE-61
High · CVSS 7.8
EPSS 0.5% (43th pct)2020-06-29
User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges
CVE-2020-8022
Public exploit
Patch
CWE-276
High · CVSS 7.8
EPSS 0.9% (58th pct)2020-06-29

Showing 30 of 502

Common weakness types

The CWE weakness categories most often found in SUSE linux enterprise server CVEs. Follow any weakness for its full explanation.

CWE-416Use After Free45 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer35 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor26 CVEs
CWE-476NULL Pointer Dereference25 CVEs
CWE-787Out-of-bounds Write25 CVEs

Disclosure activity by year

How many SUSE linux enterprise server CVEs were published each year.

2014

2015

2016

2017

2018

2019

2020

Other SUSE products

Browse vulnerabilities for other products by SUSE.

kernel-devel14,629 CVEs kernel-source14,463 CVEs kernel-macros14,095 CVEs kernel-default12,802 CVEs kernel-syms12,802 CVEs kernel-default-devel12,763 CVEs kernel-docs12,442 CVEs kernel-rt12,333 CVEs

Frequently asked questions

Common questions about SUSE linux enterprise server vulnerabilities.

How many CVEs does SUSE linux enterprise server have?: SUSE linux enterprise server has 502 published CVE records since 2007.
How many SUSE linux enterprise server CVEs are in CISA KEV?: Yes — 20 of SUSE linux enterprise server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for SUSE linux enterprise server vulnerabilities?: Yes — 165 of SUSE linux enterprise server's CVEs have a known public exploit.
Which versions of SUSE linux enterprise server are affected?: 10 distinct SUSE linux enterprise server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SUSE linux enterprise server CVEs?: SUSE linux enterprise server's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-476 (NULL Pointer Dereference).
How many critical SUSE linux enterprise server vulnerabilities are there?: SUSE linux enterprise server has 125 critical and 105 high-severity CVEs.
What is the average severity of SUSE linux enterprise server CVEs?: The average CVSS base score across SUSE linux enterprise server's scored CVEs is 6.5.