Known vulnerabilities in GitLab Enterprise Edition - page 12

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119836 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12734
CWE-79 Low
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119835 - Information Exposure Through an Error Message
CVE-2025-13978
CWE-209 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119834 - Authorization Bypass Through User-Controlled Key
CVE-2025-11247
CWE-639 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119830 - Improper input validation
CVE-2025-14157
CWE-20 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU119829 - Allocation of Resources Without Limits or Throttling
CVE-2025-4097
CWE-770 Medium
No
No
18.4.6, 18.5.4, 18.6.2 11.12.2025 SB2025121119
#VU118795 - Exposure of sensitive information to an unauthorized actor
CVE-2025-13611
CWE-200 Low
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118794 - Improper Authorization
CVE-2025-6195
CWE-285 Low
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118793 - Improper input validation
CVE-2025-7449
CWE-20 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118792 - Improper Authentication
CVE-2025-12653
CWE-287 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118791 - Improper input validation
CVE-2025-12571
CWE-20 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118790 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-9183
CWE-362 Medium
No
No
18.4.5, 18.5.3, 18.6.1 26.11.2025 SB2025112663
#VU118471 - Improper input validation
CVE-2025-12983
CWE-20 Low
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118470 - Improper Access Control
CVE-2025-7736
CWE-284 Low
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118469 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11990
CWE-22 Low
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118467 - Improper Validation of Generative AI Output
CVE-2025-6945
CWE-1426 Medium
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118465 - Exposure of sensitive information to an unauthorized actor
CVE-2025-7000
CWE-200 Medium
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118464 - Exposure of sensitive information to an unauthorized actor
CVE-2025-2615
CWE-200 Medium
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118463 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6171
CWE-200 Low
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118462 - Incorrect Authorization
CVE-2025-11865
CWE-863 Medium
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310
#VU118461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11224
CWE-79 Low
No
No
18.3.6, 18.4.4, 18.5.2 13.11.2025 SB2025111310


Showing elements 221 - 240 out of 1105