Known vulnerabilities in GitLab Enterprise Edition - page 14

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111934 - Improper Access Control
CVE-2025-5846
CWE-284 Low
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111933 - Permissions, Privileges, and Access Controls
CVE-2025-2938
CWE-264 Medium
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111932 - Improper Access Control
CVE-2025-5315
CWE-284 Medium
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111931 - Missing Authorization
CVE-2025-1754
CWE-862 Medium
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111930 - Improper input validation
CVE-2025-3279
CWE-20 Medium
No
No
17.11.5, 18.0.3, 18.1.1 25.06.2025 SB2025062519
#VU111093 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5982
CWE-200 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111091 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5195
CWE-200 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111090 - Improper input validation
CVE-2025-5996
CWE-20 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111089 - Exposure of sensitive information to an unauthorized actor
CVE-2024-9512
CWE-200 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111088 - Improper input validation
CVE-2025-1478
CWE-20 Medium
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111087 - Improper input validation
CVE-2025-1516
CWE-20 High
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111085 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-0673
CWE-835 High
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111084 - Missing Authorization
CVE-2025-5121
CWE-862 Medium
No
No
17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111083 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2254
CWE-79 Low
No
No
17.10.8, 17.11.4, 18.0.2 12.06.2025 SB2025061214
#VU111082 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4278
CWE-79 Low
No
No
18.0.2 12.06.2025 SB2025061214
#VU109648 - Improper input validation
CVE-2025-2853
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109647 - Improper input validation
CVE-2025-3111
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109640 - Resource Management Errors
CVE-2024-7803
CWE-399 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109639 - Improper input validation
CVE-2024-12093
CWE-20 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223
#VU109637 - Resource exhaustion
CVE-2025-0993
CWE-400 Medium
No
No
17.10.7, 17.11.3, 18.0.1 22.05.2025 SB2025052223


Showing elements 261 - 280 out of 1052