Known vulnerabilities in GitLab Enterprise Edition - page 51

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41437 - Server-Side Request Forgery (SSRF)
CVE-2020-13295
CWE-918 Medium
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41393 - Improper Access Control
CVE-2020-13290
CWE-284 Medium
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13288
CWE-79 Low
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41232 - Improper Access Control
CVE-2020-13294
CWE-284 Medium
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41153 - Improper Access Control
CVE-2020-13291
CWE-284 High
No
No
13.2.3 10.08.2020 SB2020080615
#VU41143 - Improper input validation
CVE-2020-13293
CWE-20 High
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41137 - Improper Authentication
CVE-2020-13292
CWE-287 High
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41132 - Improper Access Control
CVE-2020-13282
CWE-284 Medium
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41130 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13283
CWE-79 Low
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU41129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13285
CWE-79 Low
No
No
13.0.12, 13.1.6, 13.2.3 10.08.2020 SB2020080615
#VU34098 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10977
CWE-22 Medium
Available
No
12.9.1 06.08.2020 SB2020080614
#VU29554 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15525
CWE-200 Medium
No
No
12.10.14, 13.0.9, 13.1.3 07.07.2020 SB2020070718
#VU29480 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
13.1.2 02.07.2020 SB2020070220
#VU28955 - Improper Authorization
CWE-285 Medium
No
No
12.9.10, 12.10.11, 13.0.6 10.06.2020 SB2020061045
#VU28555 - Improper Authorization
CWE-285 Medium
No
No
12.9.10, 12.10.11, 13.0.4 03.06.2020 SB2020060320
#VU28334 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28329 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 29.05.2020 SB2020052901
#VU28298 - Improper Authorization
CWE-285 Medium
No
No
12.9.8, 12.10.7, 13.0.1 28.05.2020 SB2020052901
#VU27475 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12448
CWE-22 Low
No
No
12.8.10 30.04.2020 SB2020043034


Showing elements 1001 - 1020 out of 1105