Known vulnerabilities in GitLab Enterprise Edition 11.3.14 - page 2

Version: 11.3.14
Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 309
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition version 11.3.14 GitLab Enterprise Edition 11.3.14 is affected by 309 vulnerabilities: 10 high, 161 medium, 138 low Critical High Medium Low

Vulnerabilities (309)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116122 - Improper input validation
CVE-2025-10858
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU115154 - Improper input validation
CVE-2025-10094
CWE-20 High
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115153 - Improper input validation
CVE-2025-7337
CWE-20 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115150 - Improper input validation
CVE-2025-2256
CWE-20 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU114482 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-5101
CWE-94 Low
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114480 - Improper Authentication
CVE-2025-2246
CWE-287 Medium
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114479 - Allocation of Resources Without Limits or Throttling
CVE-2025-3601
CWE-770 Medium
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114071 - Allocation of Resources Without Limits or Throttling
CVE-2025-1477
CWE-770 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU111930 - Improper input validation
CVE-2025-3279
CWE-20 Medium
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111090 - Improper input validation
CVE-2025-5996
CWE-20 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111089 - Exposure of sensitive information to an unauthorized actor
CVE-2024-9512
CWE-200 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111088 - Improper input validation
CVE-2025-1478
CWE-20 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111087 - Improper input validation
CVE-2025-1516
CWE-20 High
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU109649 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4979
CWE-200 Low
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109648 - Improper input validation
CVE-2025-2853
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109647 - Improper input validation
CVE-2025-3111
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109639 - Improper input validation
CVE-2024-12093
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109637 - Resource exhaustion
CVE-2025-0993
CWE-400 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU107337 - Improper Access Control
CVE-2025-0362
CWE-284 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU107336 - Improper input validation
CVE-2025-1677
CWE-20 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015


Showing elements 21 - 40 out of 309