Known vulnerabilities in Tuleap Enterprise Edition

Vendor: Enalean
Software CPE: cpe:2.3:a:enalean:tuleap_enterprise_edition:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tuleap Enterprise Edition Tuleap Enterprise Edition is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151506 - Use of Default Credentials
CVE-2026-19851
CWE-1392 Medium
No
No
17.6 21.09.2026 SB2026092105
#VU151505 - Authorization Bypass Through User-Controlled Key
CVE-2026-14165
CWE-639 Medium
No
No
17.6 21.09.2026 SB2026092105
#VU151504 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-84285
CWE-78 High
No
No
17.6 21.09.2026 SB2026092105
#VU75441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23938
CWE-79 Low
No
No
14.4-7, 14.5-2 24.04.2023 SB2023042415