Known vulnerabilities in GitHub Enterprise Server

Vendor: GitHub
Software CPE: cpe:2.3:a:github:github_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitHub Enterprise Server GitHub Enterprise Server is affected by 5 known vulnerabilities: 1 critical, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.14.22, 3.15.17, 3.16.13, 3.17.10, 3.18.4, 3.19.1 07.01.2026 SB2026010773
#VU109636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3246
CWE-79 Low
No
No
3.16.2 22.05.2025 SB2025052215
#VU109635 - Exposed Dangerous Method or Function
CVE-2025-3509
CWE-749 Medium
No
No
3.13.14, 3.14.11, 3.15.6, 3.16.2 22.05.2025 SB2025052215
#VU109633 - Missing Authorization
CVE-2025-3124
CWE-862 Medium
No
No
3.13.14, 3.14.11, 3.15.6, 3.16.2 22.05.2025 SB2025052215
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
3.0.22, 3.1.14, 3.2.6, 3.3.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more