Known vulnerabilities in GitLab Enterprise Edition - page 20

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100470 - Improper input validation
CWE-20 Medium
No
No
17.3.7, 17.4.4, 17.5.2 14.11.2024 SB2024111420
#VU100463 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10240
CWE-200 Medium
No
No
17.3.7, 17.4.4, 17.5.2 14.11.2024 SB2024111420
#VU100459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8180
CWE-79 Low
No
No
17.3.7, 17.4.4, 17.5.2 14.11.2024 SB2024111420
#VU100458 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8648
CWE-79 Low
No
No
17.3.7, 17.4.4, 17.5.2 14.11.2024 SB2024111420
#VU100457 - Cross-Site Request Forgery (CSRF)
CVE-2024-7404
CWE-352 Low
No
No
17.3.7, 17.4.4, 17.5.2 14.11.2024 SB2024111420
#VU99333 - Allocation of Resources Without Limits or Throttling
CVE-2024-6826
CWE-770 Medium
No
No
17.3.6, 17.4.3, 17.5.1 25.10.2024 SB2024102505
#VU99332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8312
CWE-79 Low
No
No
17.3.6, 17.4.3, 17.5.1 25.10.2024 SB2024102505
#VU98344 - Exposure of sensitive information to an unauthorized actor
CVE-2024-9596
CWE-200 Low
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98342 - Exposure of sensitive information to an unauthorized actor
CVE-2024-5005
CWE-200 Low
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98339 - Security Features
CVE-2024-9623
CWE-254 Low
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98338 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6530
CWE-79 Low
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98337 - Improper input validation
CVE-2024-9631
CWE-20 Medium
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98336 - Server-Side Request Forgery (SSRF)
CVE-2024-8977
CWE-918 Medium
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98335 - Improper Access Control
CVE-2024-8970
CWE-284 Medium
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU98334 - Improper Access Control
CVE-2024-9164
CWE-284 Medium
No
No
17.2.9, 17.3.5, 17.4.2 10.10.2024 SB2024101017
#VU97717 - Exposure of sensitive information to an unauthorized actor
CVE-2024-8974
CWE-200 Low
No
No
17.2.8, 17.3.4, 17.4.1 26.09.2024 SB2024092609
#VU97716 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-4099
CWE-74 Low
No
No
17.2.8, 17.3.4, 17.4.1 26.09.2024 SB2024092609
#VU97715 - Exposure of sensitive information to an unauthorized actor
CVE-2024-4278
CWE-200 Low
No
No
17.2.8, 17.3.4, 17.4.1 26.09.2024 SB2024092609
#VU97454 - Improper Verification of Cryptographic Signature
CVE-2024-45409
CWE-347 High
Available
No
16.11.10, 17.0.8, 17.1.8, 17.2.7, 17.3.3 18.09.2024 SB2024091805
SB2024091806
SB2024091807
and 1 more
#VU97211 - Permissions, Privileges, and Access Controls
CVE-2024-8631
CWE-264 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269


Showing elements 381 - 400 out of 1105