Known vulnerabilities in Tuleap Enterprise Edition
Vendor:
Enalean
Software:
Tuleap Enterprise Edition
Software CPE:
cpe:2.3:a:enalean:tuleap_enterprise_edition:*:*:*:*:*:*:*:*
Website:
https://www.enalean.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151506 - Use of Default Credentials CVE-2026-19851 |
CWE-1392 | Medium | 17.6 | 21.09.2026 |
SB2026092105 |
||
| #VU151505 - Authorization Bypass Through User-Controlled Key CVE-2026-14165 |
CWE-639 | Medium | 17.6 | 21.09.2026 |
SB2026092105 |
||
| #VU151504 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-84285 |
CWE-78 | High | 17.6 | 21.09.2026 |
SB2026092105 |
||
| #VU75441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-23938 |
CWE-79 | Low | 14.4-7, 14.5-2 | 24.04.2023 |
SB2023042415 |