Known vulnerabilities in GitLab Enterprise Edition - page 10

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123296 - Improper Access Control
CVE-2025-14103
CWE-284 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123295 - Improper Access Control
CVE-2026-1747
CWE-284 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123293 - Allocation of Resources Without Limits or Throttling
CVE-2026-1725
CWE-770 Medium
No
No
18.9.1 26.02.2026 SB2026022626
#VU123292 - Allocation of Resources Without Limits or Throttling
CVE-2025-3525
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123289 - Allocation of Resources Without Limits or Throttling
CVE-2026-2845
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123286 - Incorrect Regular Expression
CVE-2026-1388
CWE-185 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU122654 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-1282
CWE-79 Low
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122653 - Missing Authorization
CVE-2025-14592
CWE-862 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122652 - Improper Authorization
CVE-2026-1080
CWE-285 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122651 - Server-Side Request Forgery (SSRF)
CVE-2025-12073
CWE-918 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122650 - Improper input validation
CVE-2026-1094
CWE-20 Medium
No
No
18.8.4 11.02.2026 SB2026021125
#VU122649 - Server-Side Request Forgery (SSRF)
CVE-2025-12575
CWE-918 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122648 - Improper input validation
CVE-2026-1387
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122647 - Improper input validation
CVE-2026-1456
CWE-20 Medium
No
No
18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122646 - Improper input validation
CVE-2026-1458
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0595
CWE-79 Low
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122644 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-14560
CWE-79 Low
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122643 - Improper input validation
CVE-2026-0958
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122642 - Improper input validation
CVE-2025-8099
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122641 - Improper input validation
CVE-2025-7659
CWE-20 High
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125


Showing elements 181 - 200 out of 1105