Suse Linux Enterprise Server Business Critical Linux
10 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Suse Linux Enterprise Server Business Critical Linux, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Suse Linux Enterprise Server Business Critical Linux CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High5
- Medium5
Latest CVEs
The 10 most recently published vulnerabilities affecting Suse Linux Enterprise Server Business Critical Linux.
- CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3
- CVE-2022-4244Codehaus-plexus: directory traversal7.5
- CVE-2022-4065cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal5.5
- CVE-2022-23824IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.5.5
- CVE-2022-37866Apache Ivy allows path traversal in the presence of a malicious repository7.5
- CVE-2022-21385A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N...6.2
- CVE-2022-27239In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.7.8
- CVE-2022-24839Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)7.5
- CVE-2021-29965A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website th...5.3
- CVE-2018-18385Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the ...7.5
Product grouping is registry-driven, with AI assist and human review. How it works