SUSE 厂商相关 214 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
SUSE 主要提供企业级 Linux 操作系统及云原生解决方案，其核心产品涵盖 SUSE Linux Enterprise Server 等。历史漏洞多涉及远程代码执行、权限提升及缓冲区溢出，常源于内核组件或管理工具配置不当。值得关注的是，SUSE 定期发布安全更新以修复高危风险，并支持 OpenSUSE 社区版推动漏洞透明化。截至最新统计，已收录 185 条 CVE，反映其庞大生态中持续的安全维护需求。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-8025 | openSUSE和SUSE Linux Enterprise Server permissions 安全漏洞 — SUSE Linux Enterprise Server 12-SP4 CWE-279 | 6.1 | Medium | 2020-08-07 |
| CVE-2019-3681 | 多款SUSE产品osc 安全漏洞 — SUSE Linux Enterprise Module for Development Tools 15 CWE-73 | 7.5 | High | 2020-06-29 |
| CVE-2020-8019 | 多款SUSE产品syslog-ng 安全漏洞 — SUSE Linux Enterprise Debuginfo 11-SP3 CWE-61 | 7.7 | High | 2020-06-29 |
| CVE-2020-8022 | 多款SUSE产品tomcat 安全漏洞 — SUSE Enterprise Storage 5 CWE-276 | 7.7 | High | 2020-06-29 |
| CVE-2020-8018 | SUSE Linux Enterprise Server 安全漏洞 — SUSE Linux Enterprise Server 15 SP1 CWE-276 | 8.4 | High | 2020-05-04 |
| CVE-2019-18905 | SUSE Linux Enterprise Server 数据伪造问题漏洞 — SUSE Linux Enterprise Server 12 CWE-345 | 4.8 | Medium | 2020-04-03 |
| CVE-2019-18904 | rmt-server 资源管理错误漏洞 — SUSE Linux Enterprise High Performance Computing 15-ESPOS CWE-400 | 6.5 | Medium | 2020-04-03 |
| CVE-2018-17954 | SUSE OpenStack Cloud 安全漏洞 — SUSE OpenStack Cloud 7 CWE-269 | 9.3 | Critical | 2020-04-03 |
| CVE-2020-8017 | 多款SUSE产品texlive-filesystem 竞争条件问题漏洞 — SUSE Linux Enterprise Module for Desktop Applications 15-SP1 CWE-367 | 6.2 | Medium | 2020-04-02 |
| CVE-2020-8016 | SUSE openSUSE 竞争条件问题漏洞 — SUSE Linux Enterprise Module for Desktop Applications 15-SP1 CWE-367 | 4.9 | Medium | 2020-04-02 |
| CVE-2019-3696 | 多款SUSE产品pcp路径遍历漏洞 — SUSE Linux Enterprise High Performance Computing 15-ESPOS CWE-22 | 8.4 | High | 2020-03-03 |
| CVE-2019-3695 | 多款SUSE产品pcp代码注入漏洞 — SUSE Linux Enterprise High Performance Computing 15-ESPOS CWE-94 | 8.4 | High | 2020-03-03 |
| CVE-2019-18903 | SUSE Linux Enterprise Server、openSUSE Leap和openSUSE Factory wicked 资源管理错误漏洞 — SUSE Linux Enterprise Server 12 CWE-416 | 7.5 | High | 2020-03-02 |
| CVE-2019-18902 | SUSE Linux Enterprise Server、openSUSE Leap和openSUSE Factory wicked 资源管理错误漏洞 — SUSE Linux Enterprise Server 12 CWE-416 | 7.5 | High | 2020-03-02 |
| CVE-2020-8013 | SUSE Linux Enterprise Server 后置链接漏洞 — SUSE Linux Enterprise Server 12 CWE-59 | 2.2 | Low | 2020-03-02 |
| CVE-2019-18901 | openSUSE 后置链接漏洞 — SUSE Linux Enterprise Server 12 CWE-59 | 5.1 | Medium | 2020-03-02 |
| CVE-2019-18897 | SUSE openSUSE和SUSE Linux Enterprise Server 后置链接漏洞 — SUSE Linux Enterprise Server 12 CWE-59 | 8.4 | High | 2020-03-02 |
| CVE-2019-3698 | Nagios 后置链接漏洞 — SUSE Linux Enterprise Server 12 CWE-59 | 5.7 | Medium | 2020-02-28 |
| CVE-2017-14806 | SUSE Studio onsite 信任管理问题漏洞 — Studio onsite CWE-295 | 3.7 | Low | 2020-01-27 |
| CVE-2017-14807 | SUSE Studio onsite susestudio-ui-server SQL注入漏洞 — Studio onsite CWE-89 | 8.1 | High | 2020-01-27 |
| CVE-2018-20105 | yast-rmt 日志信息泄露漏洞 — SUSE Linux Enterprise Server 15 CWE-532 | 4.0 | Medium | 2020-01-27 |
| CVE-2018-12476 | SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 安全漏洞 — SUSE Linux Enterprise Server 15 CWE-23 | 4.3 | Medium | 2020-01-27 |
| CVE-2019-18900 | libzypp 安全漏洞 — CaaS Platform 3.0 CWE-276 | 4.0 | Medium | 2020-01-24 |
| CVE-2019-3693 | GNU Mailman 后置链接漏洞 — SUSE Linux Enterprise Server 11 CWE-59 | 7.7 | High | 2020-01-24 |
| CVE-2019-3692 | 多款 SUSE 产品inn后置链接漏洞 — SUSE Linux Enterprise Server 11 CWE-59 | 7.7 | High | 2020-01-24 |
| CVE-2019-3687 | SUSE Linux Enterprise Server 授权问题漏洞 — SUSE Linux Enterprise Server CWE-276 | 4.0 | Medium | 2020-01-24 |
| CVE-2019-3691 | munge 后置链接漏洞 — SUSE Linux Enterprise Server 15 CWE-59 | 7.7 | High | 2020-01-23 |
| CVE-2019-18898 | 多款SUSE产品trousers后置链接漏洞 — SUSE Linux Enterprise Server 15 SP1 CWE-59 | 7.7 | High | 2020-01-23 |
| CVE-2019-3686 | openQA 跨站脚本漏洞 — openQA CWE-79 | 6.5 | Medium | 2020-01-17 |
| CVE-2019-3683 | SUSE Openstack Cloud keystone-json-assignment包命令注入漏洞 — SUSE Openstack Cloud 8 CWE-732 | 8.8 | High | 2020-01-17 |
本页汇总了 SUSE 厂商截至目前公开的全部 214 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。