Known vulnerabilities in GitLab Enterprise Edition - page 10

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121079 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3950
CWE-200 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121078 - Improper Access Control
CVE-2025-11246
CWE-284 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121077 - Missing Authorization
CVE-2025-13781
CWE-862 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121076 - Missing Authorization
CVE-2025-13772
CWE-862 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121075 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13761
CWE-79 Low
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121074 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-9222
CWE-79 Low
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU119836 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12734
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119835 - Information Exposure Through an Error Message
CVE-2025-13978
CWE-209 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119834 - Authorization Bypass Through User-Controlled Key
CVE-2025-11247
CWE-639 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119830 - Improper input validation
CVE-2025-14157
CWE-20 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119829 - Allocation of Resources Without Limits or Throttling
CVE-2025-4097
CWE-770 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119828 - Authentication Bypass Using an Alternate Path or Channel
CVE-2025-11984
CWE-288 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119827 - Allocation of Resources Without Limits or Throttling
CVE-2025-12562
CWE-770 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12029
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119825 - Improper Encoding or Escaping of Output
CVE-2025-8405
CWE-116 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12716
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU118793 - Improper input validation
CVE-2025-7449
CWE-20 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118792 - Improper Authentication
CVE-2025-12653
CWE-287 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118791 - Improper input validation
CVE-2025-12571
CWE-20 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118790 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-9183
CWE-362 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663


Showing elements 181 - 200 out of 1052