Known vulnerabilities in GitLab Enterprise Edition - page 18

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105686 - Improper Access Control
CVE-2024-7296
CWE-284 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105684 - Command injection
CVE-2024-8402
CWE-77 Low
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105683 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0652
CWE-200 Medium
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105682 - Improper input validation
CVE-2025-1257
CWE-20 Medium
No
No
17.7.7, 17.8.5, 17.9.2 13.03.2025 SB2025031316
#VU105039 - Improper Authorization
CVE-2024-10925
CWE-285 Medium
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU105024 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8186
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU104993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0555
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU104976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0475
CWE-79 Low
No
No
17.7.6, 17.8.4, 17.9.1 27.02.2025 SB20250227135
#VU104002 - Insufficient Session Expiration
CVE-2025-1198
CWE-613 Low
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU104001 - Incorrect Authorization
CVE-2025-0516
CWE-863 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU104000 - Server-Side Request Forgery (SSRF)
CVE-2024-9870
CWE-918 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103999 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-1212
CWE-497 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103996 - Files or Directories Accessible to External Parties
CVE-2025-1042
CWE-552 Low
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103992 - Improper input validation
CVE-2024-3303
CWE-20 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103990 - Allocation of Resources Without Limits or Throttling
CVE-2024-12379
CWE-770 Medium
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0376
CWE-79 Low
No
No
17.6.5, 17.7.4, 17.8.2 17.02.2025 SB2025021709
#VU103253 - Improper Access Control
CVE-2024-11931
CWE-284 Medium
No
No
17.6.4, 17.7.3, 17.8.1 23.01.2025 SB2025012327
#VU103252 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0314
CWE-79 Low
No
No
17.6.4, 17.7.3, 17.8.1 23.01.2025 SB2025012327
#VU102497 - Resource exhaustion
CVE-2024-6324
CWE-400 Low
No
No
17.6.4, 17.7.3, 17.8.1 09.01.2025 SB2025012327
#VU102479 - File And Directory Information Exposure
CVE-2025-0194
CWE-538 Low
No
No
17.5.5, 17.6.3, 17.7.1 09.01.2025 SB2025010944


Showing elements 341 - 360 out of 1105