Known vulnerabilities in GitLab Enterprise Edition - page 21

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97222 - Improper input validation
CWE-20 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97221 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6685
CWE-200 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97220 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-6446
CWE-451 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97219 - Cleartext Storage of Sensitive Information
CVE-2024-4472
CWE-312 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97214 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6389
CWE-200 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97213 - Exposure of sensitive information to an unauthorized actor
CVE-2024-5435
CWE-200 Low
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97212 - Exposure of sensitive information to an unauthorized actor
CVE-2024-2743
CWE-200 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97210 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-4612
CWE-601 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97207 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-4283
CWE-601 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97206 - Exposure of sensitive information to an unauthorized actor
CVE-2024-4660
CWE-200 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97205 - Security Features
CVE-2024-8311
CWE-254 Medium
No
No
17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97202 - Improper Access Control
CVE-2024-8641
CWE-284 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97197 - Improper input validation
CVE-2024-8124
CWE-20 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97190 - Server-Side Request Forgery (SSRF)
CVE-2024-8635
CWE-918 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97176 - Command injection
CVE-2024-8640
CWE-77 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU97166 - Improper Access Control
CVE-2024-6678
CWE-284 Medium
No
No
17.1.7, 17.2.5, 17.3.2 12.09.2024 SB2024091269
#VU96449 - Improper input validation
CWE-20 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96448 - Improper Access Control
CVE-2024-3127
CWE-284 Low
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96445 - Improper Access Control
CVE-2024-6502
CWE-284 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254
#VU96399 - Command injection
CVE-2024-7110
CWE-77 Medium
No
No
17.1.6, 17.2.4, 17.3.1 22.08.2024 SB2024082254


Showing elements 401 - 420 out of 1105