Known vulnerabilities in GitLab Enterprise Edition - page 13

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114073 - Improper Access Control
CVE-2025-2498
CWE-284 Low
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114072 - Incorrect Permission Assignment for Critical Resource
CVE-2025-5819
CWE-732 Medium
No
No
17.11.6, 18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114071 - Allocation of Resources Without Limits or Throttling
CVE-2025-1477
CWE-770 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114070 - Inefficient Regular Expression Complexity
CVE-2025-2937
CWE-1333 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114069 - Authorization Bypass Through User-Controlled Key
CVE-2025-8770
CWE-639 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114066 - Incorrect Authorization
CVE-2024-10219
CWE-863 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114064 - Allocation of Resources Without Limits or Throttling
CVE-2025-2614
CWE-770 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114063 - Incorrect Privilege Assignment
CVE-2024-12303
CWE-266 Low
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114062 - Permissions, Privileges, and Access Controls
CVE-2025-8094
CWE-264 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6186
CWE-79 Low
No
No
18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7739
CWE-79 Low
No
No
18.2.2 14.08.2025 SB2025081414
#VU113354 - Improper Access Control
CVE-2025-1299
CWE-284 Medium
No
No
18.0.5, 18.1.3, 18.2.1 28.07.2025 SB2025072840
#VU113353 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0765
CWE-200 Medium
No
No
18.0.5, 18.1.3, 18.2.1 28.07.2025 SB2025072840
#VU113351 - Improper Access Control
CVE-2025-4976
CWE-284 Medium
No
No
18.0.5, 18.1.3, 18.2.1 28.07.2025 SB2025072840
#VU113350 - Exposure of sensitive information to an unauthorized actor
CVE-2025-7001
CWE-200 Medium
No
No
18.0.5, 18.1.3, 18.2.1 28.07.2025 SB2025072840
#VU113348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4700
CWE-79 Low
No
No
18.0.5, 18.1.3, 18.2.1 28.07.2025 SB2025072840
#VU113226 - Improper Authorization
CVE-2025-6168
CWE-285 Low
No
No
18.0.4, 18.1.2 25.07.2025 SB2025072556
#VU113225 - Improper Authorization
CVE-2025-4972
CWE-285 Low
No
No
18.0.4, 18.1.2 25.07.2025 SB2025072556
#VU113224 - Improper Authorization
CVE-2025-3396
CWE-285 Low
No
No
17.11.6, 18.0.4, 18.1.2 25.07.2025 SB2025072556
#VU113223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6948
CWE-79 Low
No
No
17.11.6, 18.0.4, 18.1.2 25.07.2025 SB2025072556


Showing elements 241 - 260 out of 1052