Known vulnerabilities in GitLab Enterprise Edition - page 11

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122655 - Improper Authorization
CVE-2025-14594
CWE-285 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU121796 - Improper input validation
CVE-2026-1102
CWE-20 Medium
No
No
18.6.4, 18.7.2, 18.8.2 21.01.2026 SB2026012124
#VU121795 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-13335
CWE-835 Medium
No
No
18.6.4, 18.7.2, 18.8.2 21.01.2026 SB2026012124
#VU121794 - Unchecked Return Value
CVE-2026-0723
CWE-252 High
No
No
18.6.4, 18.7.2, 18.8.2 21.01.2026 SB2026012124
#VU121793 - Incorrect Authorization
CVE-2025-13928
CWE-863 Medium
No
No
18.6.4, 18.7.2, 18.8.2 21.01.2026 SB2026012124
#VU121779 - Improper input validation
CVE-2025-13927
CWE-20 Medium
No
No
18.6.4, 18.7.2, 18.8.2 21.01.2026 SB2026012124
#VU121080 - Improper input validation
CVE-2025-10569
CWE-20 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121079 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3950
CWE-200 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121078 - Improper Access Control
CVE-2025-11246
CWE-284 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121077 - Missing Authorization
CVE-2025-13781
CWE-862 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121076 - Missing Authorization
CVE-2025-13772
CWE-862 Medium
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121075 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13761
CWE-79 Low
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU121074 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-9222
CWE-79 Low
No
No
18.5.5, 18.6.3, 18.7.1 07.01.2026 SB2026010789
#VU119828 - Authentication Bypass Using an Alternate Path or Channel
CVE-2025-11984
CWE-288 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119827 - Allocation of Resources Without Limits or Throttling
CVE-2025-12562
CWE-770 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12029
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119825 - Improper Encoding or Escaping of Output
CVE-2025-8405
CWE-116 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12716
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU118778 - Out-of-bounds read
CVE-2025-64720
CWE-125 Medium
No
No
18.5.5, 18.6.3, 18.7.1 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018
CWE-122 Critical
Available
No
18.5.5, 18.6.3, 18.7.1 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more


Showing elements 201 - 220 out of 1105