Suse Linux Enterprise Module For Web Scripting — known CVE vulnerabilities

Every CVE whose affected-product data names Suse Linux Enterprise Module For Web Scripting, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-4473 — CVSS 9.8 (critical): /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete…
• CVE-2015-8866 — CVSS 9.6 (critical): ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from…