Known vulnerabilities in GitLab Enterprise Edition - page 25

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89283 - Exposure of sensitive information to an unauthorized actor
CVE-2024-3976
CWE-200 Medium
No
No
16.9.7, 16.10.5, 16.11.2 09.05.2024 SB2024050910
#VU89282 - Cross-Site Request Forgery (CSRF)
CVE-2023-6195
CWE-352 Low
No
No
16.9.7, 16.10.5, 16.11.2 09.05.2024 SB2024050910
#VU88986 - Improper Access Control
CVE-2024-1347
CWE-284 Low
No
No
16.9.6, 16.10.4, 16.11.1 25.04.2024 SB2024042510
#VU88985 - Exposure of sensitive information to an unauthorized actor
CVE-2024-4006
CWE-200 Low
No
No
16.9.6, 16.10.4, 16.11.1 25.04.2024 SB2024042510
#VU88984 - Incorrect Regular Expression
CVE-2024-2829
CWE-185 Medium
No
No
16.9.6, 16.10.4, 16.11.1 25.04.2024 SB2024042510
#VU88983 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-2434
CWE-22 Medium
No
No
16.9.6, 16.10.4, 16.11.1 25.04.2024 SB2024042510
#VU88982 - Improper Access Control
CVE-2024-4024
CWE-284 Medium
No
No
16.9.6, 16.10.4, 16.11.1 25.04.2024 SB2024042510
#VU88466 - Incorrect Regular Expression
CVE-2023-6678
CWE-185 Low
No
No
16.8.6, 16.9.4, 16.10.2 11.04.2024 SB2024041128
#VU88465 - Incorrect Regular Expression
CVE-2023-6489
CWE-185 Low
No
No
16.8.6, 16.9.4, 16.10.2 11.04.2024 SB2024041128
#VU88464 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-2279
CWE-79 Low
No
No
16.8.6, 16.9.4, 16.10.2 11.04.2024 SB2024041128
#VU88463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-3092
CWE-79 Low
No
No
16.9.4, 16.10.2 11.04.2024 SB2024041128
#VU87877 - Improper input validation
CVE-2024-2818
CWE-20 Low
No
No
16.8.5, 16.9.3, 16.10.1 28.03.2024 SB2024032804
#VU87876 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6371
CWE-79 Low
No
No
16.8.5, 16.9.3, 16.10.1 28.03.2024 SB2024032804
#VU87173 - Permissions, Privileges, and Access Controls
CVE-2024-1299
CWE-264 Low
No
No
16.7.7, 16.8.4, 16.9.2 07.03.2024 SB2024030703
#VU87171 - Improper Authorization
CVE-2024-0199
CWE-285 Medium
No
No
16.7.7, 16.8.4, 16.9.2 07.03.2024 SB2024030703
#VU86704 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4895
CWE-200 Low
No
No
16.7.6, 16.8.3, 16.9.1 22.02.2024 SB2024022212
#VU86703 - Improper Access Control
CVE-2024-1525
CWE-284 Medium
No
No
16.7.6, 16.8.3, 16.9.1 22.02.2024 SB2024022212
#VU86702 - Incorrect Regular Expression
CVE-2023-6736
CWE-185 Medium
No
No
16.7.6, 16.8.3, 16.9.1 22.02.2024 SB2024022212
#VU86701 - Improper Access Control
CVE-2023-6477
CWE-284 Low
No
No
16.7.6, 16.8.3, 16.9.1 22.02.2024 SB2024022212
#VU86700 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-1451
CWE-79 Low
No
No
16.9.1 22.02.2024 SB2024022212


Showing elements 481 - 500 out of 1105