Enterprise Linux Server Update Services for Sap Solutions vulnerabilitiesAnd the versions its exploited flaws hit.

Product6 known exploited12 versions
The short answer

Enterprise Linux Server Update Services for Sap Solutions is made by Red Hat. We track 43 published vulnerabilities in it, across 12 versions. 6 of them are on the list of flaws known to be exploited, the newest added on 2 June 2026. If you run Enterprise Linux Server Update Services for Sap Solutions, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Enterprise Linux Server Update Services for Sap Solutions flaw added to the known-exploited list is CVE-2022-0492, on 2 June 2026. We keep watching the known-exploited list.

Versions

Which versions of Enterprise Linux Server Update Services for Sap Solutions do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

  • CVE-2022-0492Exploited list, 2 Jun 2026

    Linux Kernel Improper Authentication Vulnerability

    8.18.2
  • CVE-2021-4034Exploited list, 27 Jun 2022

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    7.67.78.18.28.4
  • CVE-2019-8720Exploited list, 23 May 2022

    WebKitGTK Memory Corruption Vulnerability

    8.48.6
  • CVE-2022-0847Exploited list, 25 Apr 2022

    Linux Kernel Privilege Escalation Vulnerability

    8.18.28.4
  • CVE-2017-12615Exploited list, 25 Mar 2022

    Apache Tomcat on Windows Remote Code Execution Vulnerability

    7.47.67.7
  • CVE-2021-40438Exploited list, 1 Dec 2021

    Apache HTTP Server-Side Request Forgery (SSRF)

    7.67.7
Known exploited

Which Enterprise Linux Server Update Services for Sap Solutions vulnerabilities are being exploited?

6 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2022-0492HighKnown exploited
    Linux Kernel Improper Authentication Vulnerability

    Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

    Chance of use5.5%Known exploited since2 Jun 2026
  2. 7.8
    CVE-2021-4034HighKnown exploited
    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

    Chance of use95%Known exploited since27 Jun 2022
  3. 8.8
    CVE-2019-8720HighKnown exploited
    WebKitGTK Memory Corruption Vulnerability

    WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

    Chance of use1.6%Known exploited since23 May 2022
  4. 7.8
    CVE-2022-0847HighKnown exploited
    Linux Kernel Privilege Escalation Vulnerability

    Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system.

    Chance of use93%Known exploited since25 Apr 2022
  5. 8.1
    CVE-2017-12615HighKnown exploited
    Apache Tomcat on Windows Remote Code Execution Vulnerability

    When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request.

    Chance of use>99%Known exploited since25 Mar 2022
  6. 9.0
    CVE-2021-40438CriticalKnown exploited
    Apache HTTP Server-Side Request Forgery (SSRF)

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    Chance of use>99%Known exploited since1 Dec 2021
Exploit likelihood

Which Enterprise Linux Server Update Services for Sap Solutions flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%
    CVE-2021-40438CriticalKnown exploited

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    CVSS9.0Published16 Sep 2021
  2. >99%
    CVE-2017-12615HighKnown exploited

    When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.

    CVSS8.1Published19 Sep 2017
  3. 95%
    CVE-2021-4034HighKnown exploited

    A local privilege escalation vulnerability was found on polkit's pkexec utility.

    CVSS7.8Published28 Jan 2022
  4. 93%
    CVE-2022-0847HighKnown exploited

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values.

    CVSS7.8Published10 Mar 2022
  5. 89%

    Apache HTTP Server versions 2.4.20 to 2.4.43.

    CVSS7.5Published7 Aug 2020
  6. 74%

    The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to...

    CVSS8.8Published21 Feb 2022
  7. 68%

    A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.

    CVSS8.8Published25 Mar 2022
  8. 13%

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

    CVSS9.3Published12 Aug 2015
  9. 8.0%

    cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.

    CVSS7.5Published19 Dec 2019
  10. 5.5%
    CVE-2022-0492HighKnown exploited

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.

    CVSS7.8Published3 Mar 2022
Precursor Intelligence

Running Enterprise Linux Server Update Services for Sap Solutions? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 43 published vulnerabilities listed under the name Enterprise Linux Server Update Services for Sap Solutions, across 12 versions. The most recent Enterprise Linux Server Update Services for Sap Solutions flaw added to the known-exploited list is CVE-2022-0492, on 2 June 2026.

6 are on the list of flaws known to be exploited. The most recently added are CVE-2022-0492, CVE-2021-4034 and CVE-2019-8720.

Each flaw names its own versions, usually as ranges. The newest, CVE-2022-0492, affects 8.1, 8.2. The versions for every exploited flaw are listed on this page.

Create a Precursor Intelligence account and track Enterprise Linux Server Update Services for Sap Solutions. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.