Known vulnerabilities in GitLab Enterprise Edition - page 17

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107884 - Improper Access Control
CVE-2024-12244
CWE-284 Low
No
No
17.9.7, 17.10.5, 17.11.1 23.04.2025 SB2025042341
#VU107883 - Resource exhaustion
CVE-2025-0639
CWE-400 Medium
No
No
17.9.7, 17.10.5, 17.11.1 23.04.2025 SB2025042341
#VU107340 - Exposure of sensitive information to an unauthorized actor
CVE-2025-2469
CWE-200 Medium
No
No
17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU107339 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11129
CWE-200 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU107338 - Exposure of sensitive information to an unauthorized actor
CVE-2025-2408
CWE-200 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU107337 - Improper Access Control
CVE-2025-0362
CWE-284 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU107336 - Improper input validation
CVE-2025-1677
CWE-20 Medium
No
No
17.8.7, 17.9.6, 17.10.4 10.04.2025 SB2025041015
#VU106077 - Improper Access Control
CWE-284 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106076 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9773
CWE-79 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106075 - Resource exhaustion
CVE-2024-10307
CWE-400 Medium
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106074 - Improper Access Control
CVE-2024-12619
CWE-284 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106073 - Improper Access Control
CVE-2025-2242
CWE-284 Medium
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106072 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0811
CWE-79 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU106071 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2255
CWE-79 Low
No
No
17.8.6, 17.9.3, 17.10.1 27.03.2025 SB2025032702
#VU105742 - Server-Side Request Forgery (SSRF)
CVE-2021-22175
CWE-918 High
No
No
13.6.7, 13.7.7, 13.8.4 14.03.2025 SB2021061129
#VU105689 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-27407
CWE-94 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031315
SB2025031316
SB2025040330
and 3 more
#VU105688 - Improper Verification of Cryptographic Signature
CVE-2025-25292
CWE-347 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031314
SB2025031316
SB20250402144
and 1 more
#VU105687 - Improper Verification of Cryptographic Signature
CVE-2025-25291
CWE-347 High
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031314
SB2025031316
SB20250402144
#VU105681 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12380
CWE-200 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105680 - Improper input validation
CVE-2024-13054
CWE-20 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316


Showing elements 321 - 340 out of 1105