Known vulnerabilities in GitLab Enterprise Edition - page 46

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51624 - Improper Access Control
CVE-2021-22192
CWE-284 Medium
Available
No
13.7.9, 13.8.6, 13.9.4 22.03.2021 SB2021032223
SB2021032625
#VU51273 - Cleartext Storage of Sensitive Information
CWE-312 Low
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51272 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51271 -
CVE-2021-22186
Medium
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22185
CWE-79 Low
No
No
13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU50851 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50850 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50849 - Improper Access Control
CWE-284 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50848 - Improper Access Control
CWE-284 Low
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50847 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50846 - Resource exhaustion
CWE-400 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50845 - Resource exhaustion
CWE-400 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50844 - Improper Certificate Validation
CWE-295 Medium
No
No
13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50684 - Improper input validation
CVE-2020-13949
CWE-20 Medium
No
No
13.7.8, 13.8.5, 13.9.2 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more
#VU50388 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50387 - Security Features
CWE-254 Medium
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50385 - Improper Access Control
CVE-2021-22172
CWE-284 Medium
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
SB2021020610
#VU50384 - Information Exposure Through Log Files
CWE-532 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.7.6, 13.8.2 05.02.2021 SB2021020508


Showing elements 901 - 920 out of 1052