Known vulnerabilities in Argo CD 2.9.12

Vendor: Argo
Software: Argo CD
Version: 2.9.12
Software CPE: cpe:2.3:a:argo:argo-cd:*:*:*:*:*:kubernetes:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Argo CD version 2.9.12 Argo CD 2.9.12 is affected by 8 vulnerabilities: 4 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129012 - Improper Check or Handling of Exceptional Conditions
CVE-2025-59531
CWE-703 Medium
No
No
2.14.20, 3.0.19, 3.1.8 02.05.2026 SB20260502154
#VU109950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47933
CWE-79 Low
No
No
2.13.8, 2.14.13, 3.0.4 29.05.2025 SB20250529128
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.10.17, 2.11.9, 2.12.4 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU129006 - Improper Access Control
CVE-2024-41666
CWE-284 Low
No
No
2.9.21, 2.10.16, 2.11.7 24.07.2024 SB2024072445
#VU94676 - Resource exhaustion
CVE-2024-40634
CWE-400 Medium
No
No
2.9.20, 2.10.15, 2.11.6 23.07.2024 SB2024072331
SB2024072701
SB2024080205
and 1 more
#VU129004 - Missing Authentication for Critical Function
CVE-2024-37152
CWE-306 Medium
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU129005 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36106
CWE-200 Low
No
No
2.9.17, 2.10.12, 2.11.3 06.06.2024 SB2024060643
#VU89045 - Improper input validation
CVE-2024-32476
CWE-20 Medium
No
No
2.8.17, 2.9.13, 2.10.8 29.04.2024 SB2024042924