Known vulnerabilities in GitLab Enterprise Edition - page 48

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50851 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50850 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50849 - Improper Access Control
CWE-284 Medium
No
No
13.6.7, 13.7.7, 13.8.4 22.02.2021 SB2021022231
#VU50388 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50387 - Security Features
CWE-254 Medium
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50386 -
CVE-2021-22169
Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50385 - Improper Access Control
CVE-2021-22172
CWE-284 Medium
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
SB2021020610
#VU50384 - Information Exposure Through Log Files
CWE-532 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.6.6, 13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU50382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.7.6, 13.8.2 05.02.2021 SB2021020508
#VU49939 - Improper Authentication
CWE-287 Medium
No
No
13.5.7, 13.6.5, 13.7.4 24.01.2021 SB2021012409
#VU49355 - Improper input validation
CVE-2021-22168
CWE-20 Low
No
No
13.5.6, 13.6.4, 13.7.2 08.01.2021 SB2021010811
#VU49354 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22167
CWE-200 Medium
No
No
13.5.6, 13.6.4, 13.7.2 08.01.2021 SB2021010811
#VU49353 - Improper Authentication
CVE-2021-22171
CWE-287 High
No
No
13.5.6, 13.6.4, 13.7.2 08.01.2021 SB2021010811
#VU49351 - Improper input validation
CVE-2020-26414
CWE-20 Low
No
No
13.5.6, 13.6.4, 13.7.2 08.01.2021 SB2021010811
SB2021011251
#VU49350 - Improper input validation
CVE-2021-22166
CWE-20 Medium
No
No
13.7.2 08.01.2021 SB2021010811
SB2021011251
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286
CWE-299 Medium
No
No
13.5.6, 13.6.4, 13.7.2 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
13.5.6, 13.6.4, 13.7.2 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
13.5.6, 13.6.4, 13.7.2 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU49352 - Files or Directories Accessible to External Parties
CVE-2019-3881
CWE-552 Low
No
No
13.5.6, 13.6.4, 13.7.2 04.09.2020 SB2020090421
SB2021010812
SB2021060717
and 4 more


Showing elements 941 - 960 out of 1105