Redhat Enterprise Linux Update Services For Sap Solutions — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Enterprise Linux Update Services For Sap Solutions, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (29)

• CVE-2021-40438 — CVSS 9.0 (critical) — actively exploited: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects…
• CVE-2025-31277 — CVSS 8.8 (high) — actively exploited: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6…
• CVE-2024-3183 — CVSS 8.1 (high): A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different…
• CVE-2026-31431 — CVSS 7.8 (high) — actively exploited: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly…
• CVE-2023-3899 — CVSS 7.8 (high): A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus…
• CVE-2023-3972 — CVSS 7.8 (high): A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of…
• CVE-2023-4911 — CVSS 7.8 (high) — actively exploited: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This…
• CVE-2024-0229 — CVSS 7.8 (high): An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is…
• CVE-2024-9675 — CVSS 7.8 (high): A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache…
• CVE-2019-0211 — CVSS 7.8 (high) — actively exploited: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes…
• CVE-2025-1756 — CVSS 7.5 (high): mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's…
• CVE-2025-1755 — CVSS 7.5 (high): MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a…
• CVE-2024-12085 — CVSS 7.5 (high): A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the…
• CVE-2025-3155 — CVSS 7.4 (high): A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows…
• CVE-2025-62231 — CVSS 7.3 (high): A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function…
• CVE-2025-62230 — CVSS 7.3 (high): A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees…
• CVE-2023-3758 — CVSS 7.1 (high): A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper…
• CVE-2025-2784 — CVSS 7.0 (high): A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace()…
• CVE-2020-14355 — CVSS 6.6 (medium): Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before…
• CVE-2024-12087 — CVSS 6.5 (medium): A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option…
• CVE-2019-6470 — CVSS 6.5 (medium): There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also…
• CVE-2024-12088 — CVSS 6.5 (medium): A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination…
• CVE-2023-5455 — CVSS 6.5 (medium): A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an…
• CVE-2022-24805 — CVSS 6.5 (medium): net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the…
• CVE-2022-24806 — CVSS 6.5 (medium): net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write…
• CVE-2022-24807 — CVSS 6.5 (medium): net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET…
• CVE-2022-24808 — CVSS 6.5 (medium): net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write…
• CVE-2022-24809 — CVSS 6.5 (medium): net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only…
• CVE-2024-1062 — CVSS 5.5 (medium): A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in…