Known vulnerabilities in Tuleap Enterprise Edition 17.4

Vendor: Enalean
Software: Tuleap Enterprise Edition
Version: 17.4
Software CPE: cpe:2.3:a:enalean:tuleap_enterprise_edition:*:*:*:*:*:*:*:*
Website: https://www.enalean.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Tuleap Enterprise Edition version 17.4 Tuleap Enterprise Edition 17.4 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151506 - Use of Default Credentials
CVE-2026-19851		 CWE-1392 Medium
No
No
 17.6 21.09.2026 SB2026092105
#VU151505 - Authorization Bypass Through User-Controlled Key
CVE-2026-14165		 CWE-639 Medium
No
No
 17.6 21.09.2026 SB2026092105
#VU151504 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-84285		 CWE-78 High
No
No
 17.6 21.09.2026 SB2026092105