Known vulnerabilities in GitLab Enterprise Edition - page 14

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115155 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6769
CWE-200 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115154 - Improper input validation
CVE-2025-10094
CWE-20 High
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115153 - Improper input validation
CVE-2025-7337
CWE-20 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU115152 - Improper input validation
CVE-2025-1250
CWE-20 Medium
No
No
18.1.6, 18.2.6, 18.3.2 11.09.2025 SB2025091115
#VU114482 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-5101
CWE-94 Low
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114481 - Allocation of Resources Without Limits or Throttling
CVE-2025-4225
CWE-770 Medium
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114480 - Improper Authentication
CVE-2025-2246
CWE-287 Medium
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114479 - Allocation of Resources Without Limits or Throttling
CVE-2025-3601
CWE-770 Medium
No
No
18.1.5, 18.2.5, 18.3.1 28.08.2025 SB2025082811
#VU114073 - Improper Access Control
CVE-2025-2498
CWE-284 Low
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114072 - Incorrect Permission Assignment for Critical Resource
CVE-2025-5819
CWE-732 Medium
No
No
17.11.6, 18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114071 - Allocation of Resources Without Limits or Throttling
CVE-2025-1477
CWE-770 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114070 - Inefficient Regular Expression Complexity
CVE-2025-2937
CWE-1333 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114069 - Authorization Bypass Through User-Controlled Key
CVE-2025-8770
CWE-639 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114066 - Incorrect Authorization
CVE-2024-10219
CWE-863 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114064 - Allocation of Resources Without Limits or Throttling
CVE-2025-2614
CWE-770 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114063 - Incorrect Privilege Assignment
CVE-2024-12303
CWE-266 Low
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114062 - Permissions, Privileges, and Access Controls
CVE-2025-8094
CWE-264 Medium
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6186
CWE-79 Low
No
No
18.1.4, 18.2.2 14.08.2025 SB2025081414
#VU114060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7739
CWE-79 Low
No
No
18.2.2 14.08.2025 SB2025081414
#VU114057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7734
CWE-79 Low
No
No
18.0.6, 18.1.4, 18.2.2 14.08.2025 SB2025081414


Showing elements 261 - 280 out of 1105