Known vulnerabilities in GitLab Enterprise Edition - page 47

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54096 - Improper Certificate Validation
CVE-2021-22218
CWE-295 Low
No
No
13.10.5, 13.11.5, 13.12.2 14.06.2021 SB2021061405
SB2021060148
#VU54095 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22215
CWE-200 Low
No
No
13.11.5, 13.12.2 14.06.2021 SB2021060148
#VU52801 - Improper Access Control
CVE-2021-22211
CWE-284 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52800 - Permissions, Privileges, and Access Controls
CVE-2021-22208
CWE-264 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52799 - Improper input validation
CVE-2021-22210
CWE-20 Medium
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52798 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22206
CWE-200 Low
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52797 - Improper Authorization
CVE-2021-22209
CWE-285 Medium
No
No
13.9.7, 13.10.4, 13.11.2 03.05.2021 SB2021050307
SB2021051917
#VU52499 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22205
CWE-78 Medium
Available
Exploited
13.8.8, 13.9.6, 13.10.3 22.04.2021 SB2021042211
SB2021042936
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965
CWE-611 Medium
No
No
13.8.8, 13.9.6, 13.10.3 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU51624 - Improper Access Control
CVE-2021-22192
CWE-284 Medium
Available
No
13.7.9, 13.8.6, 13.9.4 22.03.2021 SB2021032223
SB2021032625
#VU51273 - Cleartext Storage of Sensitive Information
CWE-312 Low
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51272 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51271 -
CVE-2021-22186
Medium
No
No
13.7.8, 13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU51270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22185
CWE-79 Low
No
No
13.8.5, 13.9.2 09.03.2021 SB2021030910
#VU50848 - Improper Access Control
CWE-284 Low
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50847 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50846 - Resource exhaustion
CWE-400 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50845 - Resource exhaustion
CWE-400 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50844 - Improper Certificate Validation
CWE-295 Medium
No
No
13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50684 - Improper input validation
CVE-2020-13949
CWE-20 Medium
No
No
13.7.8, 13.8.5, 13.9.2 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more


Showing elements 921 - 940 out of 1105