Known vulnerabilities in GitLab Enterprise Edition - page 44

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56269 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56268 - Improper Access Control
CWE-284 Medium
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56267 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56266 - Improper input validation
CWE-20 Medium
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22238
CWE-79 Low
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56262 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22258
CWE-200 Low
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU56261 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22257
CWE-200 Medium
No
No
14.0.9, 14.1.4, 14.2.2 02.09.2021 SB2021090204
#VU55766 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.12.9, 14.0.7, 14.1.2 10.08.2021 SB2021081044
#VU55762 - Improper Access Control
CVE-2021-22239
CWE-284 Medium
No
No
14.0.7, 14.1.2 10.08.2021 SB2021081044
#VU55760 - Improper input validation
CVE-2021-22236
CWE-20 Medium
No
No
14.1.2 10.08.2021 SB2021081044
#VU55734 - Improper Authorization
CVE-2021-22237
CWE-285 Medium
No
No
13.12.9, 14.0.7, 14.1.2 10.08.2021 SB2021081044
#VU55580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
14.1.2 04.08.2021 SB2021080409
#VU54622 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
13.11.7, 13.12.8, 14.0.4 08.07.2021 SB2021070817
#VU54571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22228
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54570 - Improper Access Control
CWE-284 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54569 - Improper Access Control
CVE-2021-22226
CWE-284 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54568 - Improper Authorization
CWE-285 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54567 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22231
CWE-200 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54564 - Resource exhaustion
CWE-400 Medium
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54563 - Cross-Site Request Forgery (CSRF)
CVE-2021-22224
CWE-352 Medium
No
No
13.12.6, 14.0.2 06.07.2021 SB2021070614


Showing elements 861 - 880 out of 1052