Known vulnerabilities in GitLab Enterprise Edition - page 34

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71085 - Improper input validation
CVE-2022-3514
CWE-20 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71084 - Improper input validation
CVE-2022-4131
CWE-20 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71083 - Exposure of sensitive information to an unauthorized actor
CVE-2023-0042
CWE-200 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71082 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3870
CWE-200 Medium
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71081 - Improper Authorization
CVE-2022-4167
CWE-285 Medium
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU71080 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-3573
CWE-79 Low
No
No
15.5.7, 15.6.4, 15.7.2 11.01.2023 SB2023011131
#VU69786 - Server-Side Request Forgery (SSRF)
CVE-2022-4201
CWE-918 Medium
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69785 - Improper input validation
CVE-2022-3478
CWE-20 Low
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69784 - Improper Access Control
CVE-2022-3482
CWE-284 Medium
No
No
15.3.5, 15.4.4, 15.5.2 01.12.2022 SB2022120119
#VU69781 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-3572
CWE-79 Low
No
No
15.3.5, 15.4.4, 15.5.2 01.12.2022 SB2022120119
#VU69776 - Exposure of sensitive information to an unauthorized actor
CVE-2022-4054
CWE-200 Low
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69774 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3902
CWE-200 Low
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69772 - Security Features
CVE-2022-4205
CWE-254 Medium
No
No
15.4.6, 15.5.5, 15.6.1 01.12.2022 SB2022120120
#VU69769 - Improper Authorization
CVE-2022-3740
CWE-285 Low
No
No
15.3.5, 15.4.4, 15.5.2 01.12.2022 SB2022120119
#VU69768 - Improper Authentication
CVE-2022-3820
CWE-287 Low
No
No
15.4.4, 15.5.2 01.12.2022 SB2022120119
#VU68986 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-3486
CWE-601 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68984 - Improper input validation
CVE-2022-3726
CWE-20 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68983 - Resource exhaustion
CVE-2022-3818
CWE-400 Medium
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68982 - Improper Access Control
CVE-2022-3483
CWE-284 Low
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721
#VU68981 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-3265
CWE-79 Low
No
No
15.3.5, 15.4.4, 15.5.2 07.11.2022 SB2022110721


Showing elements 661 - 680 out of 1105