SUSE Linux Enterprise Server 12 SP1

productDE

cpe:/o:suse:linux_enterprise_server:12:sp1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical13high21medium1low

updated 2026-10-27

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	—
CVE-2016-2776US	high7.5	89.5% (100th)	Exploit	no fix	2016-09-28	—
CVE-2016-6210US	medium5.9	88.9% (100th)	Exploit	no fix	2017-02-13	—
CVE-2016-0777US	medium6.5	63.5% (99th)	Exploit	no fix	2016-01-14	—
CVE-2016-6515US	high7.5	58.6% (99th)	Exploit	no fix	2016-08-07	—
CVE-2016-5636US	critical9.8	25.5% (98th)	Exploit	no fix	2016-09-02	—
CVE-2016-5699US	medium6.1	9.89% (96th)	Exploit	no fix	2016-09-02	—
CVE-2016-1839US	medium5.5	7.35% (94th)	Exploit	no fix	2016-05-20	—
CVE-2016-1838US	medium5.5	6.94% (94th)	Exploit	no fix	2016-05-20	—
CVE-2016-1286US	high8.6	60.4% (99th)	—	no fix	2016-03-09	—
CVE-2016-1285US	medium6.8	57.4% (99th)	—	no fix	2016-03-09	—
CVE-2016-5387US	high8.1	55.7% (99th)	—	no fix	2016-07-19	—
CVE-2016-5388US	high8.1	50.9% (99th)	—	no fix	2016-07-19	—
CVE-2016-5385US	high8.1	50.4% (99th)	—	no fix	2016-07-19	—
CVE-2016-0778US	high8.1	20.9% (98th)	—	no fix	2016-01-14	—
CVE-2015-8704US	medium6.5	20.3% (97th)	—	no fix	2016-01-20	—
CVE-2016-1907US	medium5.3	14.3% (97th)	—	no fix	2016-01-19	—
CVE-2015-8668US	critical9.8	13.7% (96th)	—	no fix	2016-01-08	—
CVE-2016-1835US	high8.8	5.58% (93rd)	—	no fix	2016-05-20	—
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	—
CVE-2016-5386US	high8.1	5.22% (92nd)	—	no fix	2016-07-19	—
CVE-2016-1000109US	medium5.3	5.08% (92nd)	—	no fix	2020-02-19	—
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-1834US	high7.8	4.62% (92nd)	—	no fix	2016-05-20	—
CVE-2016-1000110US	medium6.1	4.53% (91st)	—	no fix	2019-11-27	—
CVE-2016-1837US	medium5.5	4.45% (91st)	—	no fix	2016-05-20	—
CVE-2015-7554US	critical9.8	4.19% (91st)	—	no fix	2016-01-08	—
CVE-2016-3449US	high8.3	4.01% (90th)	—	no fix	2016-04-21	—
CVE-2016-3425US	medium4.3	3.80% (90th)	—	no fix	2016-04-21	—
CVE-2016-0695US	medium5.9	3.40% (89th)	—	no fix	2016-04-21	—
CVE-2016-1840US	high7.8	3.24% (88th)	—	no fix	2016-05-20	—
CVE-2015-7575US	medium5.9	2.90% (87th)	—	no fix	2016-01-09	—
CVE-2015-8683US	medium5.5	2.86% (87th)	—	no fix	2016-04-13	—
CVE-2015-8665US	medium5.5	2.86% (87th)	—	no fix	2016-04-13	—
CVE-2016-3422US	medium4.3	2.80% (86th)	—	no fix	2016-04-21	—
CVE-2016-3426US	low3.1	2.79% (86th)	—	no fix	2016-04-21	—
CVE-2016-1000111US	medium5.3	2.76% (86th)	—	no fix	2020-03-11	—
CVE-2016-1833US	medium5.5	2.56% (85th)	—	no fix	2016-05-20	—
CVE-2016-1000104US	high8.8	2.23% (83rd)	—	no fix	2019-12-03	—
CVE-2016-1000107US	medium6.1	1.47% (74th)	—	no fix	2019-12-10	—
CVE-2016-1000108US	medium6.1	1.10% (65th)	—	no fix	2019-12-10	—
CVE-2016-1000105US	—	—	—	no fix	2020-01-31	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer11 CVEs
CWE-20Improper Input Validation11 CVEs
CWE-17CWE-175 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-284Improper Access Control3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)43 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan