Known vulnerabilities in GitLab Enterprise Edition - page 8

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125575 - Missing Authorization
CVE-2026-4916
CWE-862 Low
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125571 - Incorrect Authorization
CVE-2026-2104
CWE-863 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125570 - Incorrect Authorization
CVE-2026-1752
CWE-863 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125569 - Missing Authorization
CVE-2025-9484
CWE-862 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125560 - Incorrect Authorization
CVE-2026-2619
CWE-863 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125559 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4332
CWE-79 Low
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125556 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-1516
CWE-94 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125555 - Improper Validation of Specified Quantity in Input
CVE-2026-1101
CWE-1284 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125554 - Improper input validation
CVE-2026-1403
CWE-20 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU125553 - Improper Validation of Specified Quantity in Input
CVE-2025-12664
CWE-1284 Medium
No
No
18.8.9, 18.9.5, 18.10.3 09.04.2026 SB2026040951
#VU124598 - Improper Access Control
CVE-2026-2370
CWE-284 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124601 - Improper input validation
CVE-2026-3988
CWE-20 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124602 - Improper Access Control
CVE-2026-2745
CWE-284 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124603 - Improper Access Control
CVE-2026-1724
CWE-284 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124604 - Resource exhaustion
CVE-2025-13436
CWE-400 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124605 - Resource exhaustion
CVE-2025-13078
CWE-400 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-2973
CWE-79 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124607 - Improper Access Control
CVE-2026-2726
CWE-284 Low
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124608 - Improper Access Control
CVE-2025-14595
CWE-284 Low
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124609 - Improper Authentication
CVE-2026-4363
CWE-287 Low
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205


Showing elements 141 - 160 out of 1105