Known vulnerabilities in GitLab Enterprise Edition 11.3.14 - page 7

Version: 11.3.14
Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 309
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition version 11.3.14 GitLab Enterprise Edition 11.3.14 is affected by 309 vulnerabilities: 10 high, 161 medium, 138 low Critical High Medium Low

Vulnerabilities (309)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74253 - Improper Access Control
CVE-2023-1417
CWE-284 Low
No
No
15.8.5, 15.9.4, 15.10.1 31.03.2023 SB2023033126
#VU74248 - Command injection
CVE-2023-1708
CWE-77 Medium
No
No
15.8.5, 15.9.4, 15.10.1 31.03.2023 SB2023033126
#VU72751 - Improper Access Control
CVE-2023-1084
CWE-284 Low
No
No
15.7.8, 15.8.4, 15.9.2 03.03.2023 SB2023030327
#VU72749 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-3381
CWE-601 Medium
No
No
15.7.8, 15.8.4, 15.9.2 03.03.2023 SB2023030327
#VU72748 - Improper input validation
CVE-2023-1072
CWE-20 Low
No
No
15.7.8, 15.8.4, 15.9.2 03.03.2023 SB2023030327
#VU71723 - Cross-Site Request Forgery (CSRF)
CVE-2022-4138
CWE-352 Low
No
No
15.6.7, 15.7.6, 15.8.1 01.02.2023 SB2023020119
#VU71085 - Improper input validation
CVE-2022-3514
CWE-20 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71084 - Improper input validation
CVE-2022-4131
CWE-20 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71082 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3870
CWE-200 Medium
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU69786 - Server-Side Request Forgery (SSRF)
CVE-2022-4201
CWE-918 Medium
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69784 - Improper Access Control
CVE-2022-3482
CWE-284 Medium
No
No
15.3.5, 15.4.4, 15.5.2 01.12.2022 SB2022120119
#VU69776 - Exposure of sensitive information to an unauthorized actor
CVE-2022-4054
CWE-200 Low
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69774 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3902
CWE-200 Low
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69772 - Security Features
CVE-2022-4205
CWE-254 Medium
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU68992 - Improper Authorization
CVE-2022-3706
CWE-285 Low
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68991 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-3280
CWE-601 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68986 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-3486
CWE-601 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68983 - Resource exhaustion
CVE-2022-3818
CWE-400 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68981 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-3265
CWE-79 Low
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU67806 - Uncaught Exception
CVE-2022-3279
CWE-248 Low
No
No
15.2.5, 15.3.4, 15.4.1 03.10.2022 SB2022100325


Showing elements 121 - 140 out of 309