Known vulnerabilities in GitLab Enterprise Edition - page 46

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55766 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.12.9, 14.0.7, 14.1.2 10.08.2021 SB2021081044
#VU55580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
14.1.2 04.08.2021 SB2021080409
#VU54622 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
13.11.7, 13.12.8, 14.0.4 08.07.2021 SB2021070817
#VU54572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22228
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54570 - Improper Access Control
CWE-284 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54569 - Improper Access Control
CVE-2021-22226
CWE-284 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54568 - Improper Authorization
CWE-285 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54567 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22231
CWE-200 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54564 - Resource exhaustion
CWE-400 Medium
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54563 - Cross-Site Request Forgery (CSRF)
CVE-2021-22224
CWE-352 Medium
No
No
13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22223
CWE-79 Low
No
No
13.11.6, 13.12.6, 14.0.2 06.07.2021 SB2021070614
#VU54094 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22219
CWE-200 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54093 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22220
CWE-79 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54090 - Resource exhaustion
CVE-2021-22216
CWE-400 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54088 - Insufficient Session Expiration
CVE-2021-22221
CWE-613 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54087 - Resource exhaustion
CVE-2021-22217
CWE-400 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54086 - Server-Side Request Forgery (SSRF)
CVE-2021-22214
CWE-918 High
Available
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54085 - Improper input validation
CVE-2021-22181
CWE-20 Medium
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22213
CWE-79 Low
No
No
13.10.5, 13.11.5, 13.12.2 10.06.2021 SB2021061405
SB2021060148


Showing elements 901 - 920 out of 1105