Red Hat Enterprise Linux 5

productDE

cpe:/o:redhat:enterprise_linux:5::server

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical12high22medium4low

updated 2026-10-27

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	—
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	no fix	2015-01-28	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2014-6593US	medium4.0	66.4% (99th)	Exploit	no fix	2015-01-21	—
CVE-2014-5119US	high7.5	17.0% (97th)	Exploit	no fix	2014-08-29	—
CVE-2014-5139US	medium4.3	16.3% (97th)	Exploit	no fix	2014-08-13	—
CVE-2014-3512US	high7.5	74.1% (99th)	—	no fix	2014-08-13	—
CVE-2016-1286US	high8.6	60.4% (99th)	—	no fix	2016-03-09	—
CVE-2016-1285US	medium6.8	57.4% (99th)	—	no fix	2016-03-09	—
CVE-2015-5722US	high7.8	34.9% (98th)	—	no fix	2015-09-05	—
CVE-2014-3508US	medium4.3	24.5% (98th)	—	no fix	2014-08-13	—
CVE-2014-3511US	medium4.3OT elevated	14.1% (97th)	—	no fix	2014-08-13	—
CVE-2014-3509US	medium6.8	12.9% (96th)	—	no fix	2014-08-13	—
CVE-2015-0408US	high10.0	6.88% (94th)	—	no fix	2015-01-21	—
CVE-2014-6601US	high10.0	6.88% (94th)	—	no fix	2015-01-21	—
CVE-2015-0395US	high9.3	5.91% (93rd)	—	no fix	2015-01-21	—
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	—
CVE-2015-0410US	medium5.0	5.03% (92nd)	—	no fix	2015-01-21	—
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2014-6549US	high10.0	4.58% (92nd)	—	no fix	2015-01-21	—
CVE-2015-0407US	medium5.0	4.35% (91st)	—	no fix	2015-01-21	—
CVE-2014-6585US	low2.6	4.30% (91st)	—	no fix	2015-01-21	—
CVE-2015-0400US	medium5.0	4.15% (91st)	—	no fix	2015-01-21	—
CVE-2014-6591US	low2.6	4.05% (91st)	—	no fix	2015-01-21	—
CVE-2016-3449US	high8.3	4.01% (90th)	—	no fix	2016-04-21	—
CVE-2015-0437US	high9.3	4.00% (90th)	—	no fix	2015-01-21	—
CVE-2015-0406US	medium5.8	3.90% (90th)	—	no fix	2015-01-21	—
CVE-2016-3425US	medium4.3	3.80% (90th)	—	no fix	2016-04-21	—
CVE-2014-3660US	medium5.0	3.78% (90th)	—	no fix	2014-11-04	—
CVE-2016-0695US	medium5.9	3.40% (89th)	—	no fix	2016-04-21	—
CVE-2016-3422US	medium4.3	2.80% (86th)	—	no fix	2016-04-21	—
CVE-2016-3426US	low3.1	2.79% (86th)	—	no fix	2016-04-21	—
CVE-2014-0475US	medium6.8	2.69% (86th)	—	no fix	2014-07-29	—
CVE-2015-0412US	high7.2	1.46% (73rd)	—	no fix	2015-01-21	—
CVE-2015-0383US	medium5.4	0.45% (39th)	—	no fix	2015-01-21	—
CVE-2015-0403US	medium6.9	0.44% (38th)	—	no fix	2015-01-21	—
CVE-2014-8159US	medium6.9	0.42% (36th)	—	no fix	2015-03-16	—
CVE-2014-6587US	medium4.3	0.40% (35th)	—	no fix	2015-01-21	—
CVE-2015-0413US	low1.9	0.40% (34th)	—	no fix	2015-01-21	—
CVE-2015-0421US	medium6.9	0.39% (33rd)	—	no fix	2015-01-21	—
CVE-2008-0884US	medium6.9	0.36% (30th)	—	no fix	2008-04-04	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-17CWE-175 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-617Reachable Assertion3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)41 CVEs
USRed Hat Product Security (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan