opensuse project suse linux enterprise server

Name: opensuse project suse linux enterprise server
Brand: opensuse project

productUS

cpe:2.3:o:opensuse_project:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical5high3medium0low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-9846US	critical9.8	4.85% (92nd)	—	no fix	2017-03-20	2 versions
CVE-2014-9847US	critical9.8	4.58% (92nd)	—	no fix	2017-03-20	2 versions
CVE-2014-9843US	critical9.8	3.93% (90th)	—	no fix	2017-03-20	= 12.0
CVE-2014-9841US	critical9.8	3.93% (90th)	—	no fix	2017-03-20	= 12.0
CVE-2014-9848US	high7.5	3.73% (90th)	—	no fix	2017-03-20	= 12.0
CVE-2014-9851US	high7.5	3.70% (90th)	—	no fix	2017-03-20	2 versions
CVE-2014-9850US	high7.5	3.62% (89th)	—	no fix	2017-03-20	= 12.0
CVE-2014-9849US	high7.5	3.62% (89th)	—	no fix	2017-03-20	2 versions
CVE-2014-9842US	high7.5	3.62% (89th)	—	no fix	2017-03-20	2 versions
CVE-2014-4258US	medium6.5	3.51% (89th)	—	no fix	2014-07-17	= 11.0
CVE-2014-9844US	medium5.5	2.05% (81st)	—	no fix	2017-03-20	2 versions
CVE-2014-9845US	medium5.5	1.95% (80th)	—	no fix	2017-03-20	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-399CWE-3992 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-388CWE-3881 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.