Known vulnerabilities in GitLab Enterprise Edition - page 13

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117467 - Missing Authorization
CVE-2025-11989
CWE-862 Low
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117466 - Business Logic Errors (3.0)
CVE-2025-6601
CWE-840 Low
No
No
18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117465 - Incorrect Authorization
CVE-2025-11971
CWE-863 Medium
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117459 - Improper input validation
CVE-2025-11974
CWE-20 Medium
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117458 - Improper input validation
CVE-2025-11447
CWE-20 Medium
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117457 - Improper input validation
CVE-2025-10497
CWE-20 Medium
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU117456 - Improper Access Control
CVE-2025-11702
CWE-284 Medium
No
No
18.3.5, 18.4.3, 18.5.1 22.10.2025 SB2025102269
#VU116859 - Improper input validation
CVE-2025-2934
CWE-20 Medium
No
No
18.2.8, 18.3.4, 18.4.2 09.10.2025 SB2025100920
#VU116858 - Missing Authorization
CVE-2025-9825
CWE-862 Medium
No
No
18.2.8, 18.3.4, 18.4.2 09.10.2025 SB2025100920
#VU116856 - Improper input validation
CVE-2025-10004
CWE-20 Medium
No
No
18.2.8, 18.3.4, 18.4.2 09.10.2025 SB2025100920
#VU116852 - Incorrect Authorization
CVE-2025-11340
CWE-863 Medium
No
No
18.3.4, 18.4.2 09.10.2025 SB2025100920
#VU116134 - Improper input validation
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116133 - Improper input validation
CVE-2025-10868
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116132 - Incorrect Ownership Assignment
CVE-2025-5069
CWE-708 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116131 - Improper input validation
CVE-2025-10867
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116126 - Exposure of sensitive information to an unauthorized actor
CVE-2025-9958
CWE-200 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116125 - Improper input validation
CVE-2025-8014
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU116122 - Improper input validation
CVE-2025-10858
CWE-20 Medium
No
No
18.2.7, 18.3.3, 18.4.1 26.09.2025 SB2025092625
#VU115151 - Server-Side Request Forgery (SSRF)
CVE-2025-6454
CWE-918 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115150 - Improper input validation
CVE-2025-2256
CWE-20 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115


Showing elements 241 - 260 out of 1105