Known vulnerabilities in GitLab Enterprise Edition - page 20

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97222 - Improper input validation
CWE-20 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97202 - Improper Access Control
CVE-2024-8641
CWE-284 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97197 - Improper input validation
CVE-2024-8124
CWE-20 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97190 - Server-Side Request Forgery (SSRF)
CVE-2024-8635
CWE-918 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97176 - Command injection
CVE-2024-8640
CWE-77 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97166 - Improper Access Control
CVE-2024-6678
CWE-284 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU96449 - Improper input validation
CWE-20 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96448 - Improper Access Control
CVE-2024-3127
CWE-284 Low
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96445 - Improper Access Control
CVE-2024-6502
CWE-284 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96399 - Command injection
CVE-2024-7110
CWE-77 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU95545 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7586
CWE-200 Low
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95543 - Incorrect Regular Expression
CVE-2024-3114
CWE-185 Low
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95538 - Improper Access Control
CVE-2024-4784
CWE-284 Low
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95537 - Observable discrepancy
CVE-2024-3958
CWE-203 Medium
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95535 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-4207
CWE-79 Low
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95533 - Security Features
CVE-2024-6329
CWE-254 Medium
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95531 - Incorrect Regular Expression
CVE-2024-2800
CWE-185 Medium
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95527 - Improper input validation
CVE-2024-4210
CWE-20 Medium
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95523 - Resource exhaustion
CVE-2024-5423
CWE-400 Medium
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830
#VU95522 - Improper Access Control
CVE-2024-6356
CWE-284 Low
No
No
17.0.6, 17.1.4, 17.2.2 08.08.2024 SB2024080830


Showing elements 381 - 400 out of 1052