Known vulnerabilities in GitLab Enterprise Edition - page 45

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105742 - Server-Side Request Forgery (SSRF)
CVE-2021-22175
CWE-918 High
No
No
13.6.7, 13.7.7, 13.8.4 14.03.2025 SB2021061129
#VU54572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22223
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54096 - Improper Certificate Validation
CVE-2021-22218
CWE-295 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54095 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22215
CWE-200 Low
No
No
13.11.5, 13.12.2 14.06.2021 SB2021060148
#VU54094 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22219
CWE-200 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54093 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22220
CWE-79 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54090 - Resource exhaustion
CVE-2021-22216
CWE-400 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54088 - Insufficient Session Expiration
CVE-2021-22221
CWE-613 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54087 - Resource exhaustion
CVE-2021-22217
CWE-400 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54086 - Server-Side Request Forgery (SSRF)
CVE-2021-22214
CWE-918 High
Available
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54085 - Improper input validation
CVE-2021-22181
CWE-20 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22213
CWE-79 Low
No
No
13.10.5, 13.11.5, 13.12.2 10.06.2021 SB2021061405
SB2021060148
#VU52801 - Improper Access Control
CVE-2021-22211
CWE-284 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52800 - Permissions, Privileges, and Access Controls
CVE-2021-22208
CWE-264 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52799 - Improper input validation
CVE-2021-22210
CWE-20 Medium
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52798 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22206
CWE-200 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52797 - Improper Authorization
CVE-2021-22209
CWE-285 Medium
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52499 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22205
CWE-78 Medium
Available
Exploited
13.8.8, 13.9.6, 13.10.3 22.04.2021 SB2021042211
SB2021042936
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965
CWE-611 Medium
No
No
13.8.8, 13.9.6, 13.10.3 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more


Showing elements 881 - 900 out of 1052