Skip to content

Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Is your version affected?

CVE Summary Score Published
CVE-2026-34486 Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Not rated Apr 9, 2026
CVE-2026-29146 Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration Not rated Apr 9, 2026
CVE-2026-32280 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… 7.5 High Apr 8, 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 High Apr 8, 2026
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to… 7.5 High Apr 8, 2026
CVE-2026-34078 Flatpak is a Linux application sandboxing and distribution framework 9.3 Critical Apr 7, 2026
CVE-2026-34986 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including… 7.5 High Apr 6, 2026
CVE-2026-34982 Vim is an open source, command line text editor 8.2 High Apr 6, 2026
CVE-2026-31402 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache… 9.8 Critical Apr 3, 2026
CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE 8.1 High Apr 1, 2026
CVE-2026-5119 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Medium Mar 30, 2026
CVE-2026-4887 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image 6.1 Medium Mar 26, 2026
CVE-2026-1519 If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume… 7.5 High Mar 25, 2026
CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before… 8.8 High Mar 25, 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critical Mar 20, 2026
CVE-2026-30922 pyasn1 is a generic ASN.1 library for Python 7.5 High Mar 18, 2026
CVE-2026-26740 Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the… 8.2 High Mar 18, 2026
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs 7.5 High Mar 6, 2026
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which… 7.5 High Mar 6, 2026
CVE-2025-10911 Libxslt: use-after-free with key data stored cross-rvt 5.5 Medium Sep 25, 2025
CVE-2025-6170 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files 2.5 Low Jun 16, 2025

Other Red Hat products