Known vulnerabilities in GitLab Enterprise Edition - page 16

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106077 - Improper Access Control
CWE-284 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106076 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9773
CWE-79 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106075 - Resource exhaustion
CVE-2024-10307
CWE-400 Medium
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106074 - Improper Access Control
CVE-2024-12619
CWE-284 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106073 - Improper Access Control
CVE-2025-2242
CWE-284 Medium
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU105689 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-27407
CWE-94 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031315
SB2025031316
SB2025040330
and 3 more
#VU105688 - Improper Verification of Cryptographic Signature
CVE-2025-25292
CWE-347 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031314
SB2025031316
SB20250402144
and 1 more
#VU105687 - Improper Verification of Cryptographic Signature
CVE-2025-25291
CWE-347 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031314
SB2025031316
SB20250402144
#VU105686 - Improper Access Control
CVE-2024-7296
CWE-284 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105684 - Command injection
CVE-2024-8402
CWE-77 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105683 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0652
CWE-200 Medium
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105682 - Improper input validation
CVE-2025-1257
CWE-20 Medium
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105681 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12380
CWE-200 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105680 - Improper input validation
CVE-2024-13054
CWE-20 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105039 - Improper Authorization
CVE-2024-10925
CWE-285 Medium
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU105024 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8186
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU104993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0555
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU104976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0475
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU103990 - Allocation of Resources Without Limits or Throttling
CVE-2024-12379
CWE-770 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0376
CWE-79 Low
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709


Showing elements 301 - 320 out of 1052