Known vulnerabilities in GitLab Enterprise Edition - page 50

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13285
CWE-79 Low
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU34098 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10977
CWE-22 Medium
Available
No
12.9.1 06.08.2020 SB2020080614
#VU29554 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15525
CWE-200 Medium
No
No
12.10.14, 13.0.9, 13.1.3 07.07.2020 SB2020070718
#VU29480 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.1.2 02.07.2020 SB2020070220
#VU28955 - Improper Authorization
CWE-285 Medium
No
No
12.9.10, 12.10.11, 13.0.6 10.06.2020 SB2020061045
#VU28555 - Improper Authorization
CWE-285 Medium
No
No
12.9.10, 12.10.11, 13.0.4 03.06.2020 SB2020060320
#VU28334 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28332 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Low
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28331 - Resource exhaustion
CWE-400 Medium
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28330 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28329 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28328 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28327 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28325 - Improper Access Control
CWE-284 Medium
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28324 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28323 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28320 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU28298 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901


Showing elements 981 - 1000 out of 1052