Known vulnerabilities in Consul Enterprise

Vendor: HashiCorp
Software CPE: cpe:2.3:a:hashicorp:consul_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 49
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Consul Enterprise Consul Enterprise is affected by 49 known vulnerabilities: 3 high, 37 medium, 9 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99582 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-10005
CWE-22 Medium
No
No
1.20.1 01.11.2024 SB2024110123
#VU99581 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2024-10006
CWE-644 Medium
No
No
1.20.1 01.11.2024 SB2024110123
#VU99580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10086
CWE-79 Low
No
No
1.20.0 01.11.2024 SB2024110121
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.18.1 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.18.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.18.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.18.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.18.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.18.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86326 - NULL Pointer Dereference
CVE-2024-23327
CWE-476 Medium
No
No
1.15.10, 1.16.6, 1.17.3 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86325 - Uncaught Exception
CVE-2024-23325
CWE-248 Medium
No
No
1.15.10, 1.16.6, 1.17.3 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86324 - Improper Authentication
CVE-2024-23324
CWE-287 High
No
No
1.15.10, 1.16.6, 1.17.3 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86323 - Inefficient CPU Computation
CVE-2024-23323
CWE-1176 Low
No
No
1.15.10, 1.16.6, 1.17.3 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86322 - Use After Free
CVE-2024-23322
CWE-416 Medium
No
No
1.15.10, 1.16.6, 1.17.3 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426
CWE-776 Medium
No
No
1.18.1 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 23 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
1.18.1 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285
CWE-311 Medium
No
No
1.15.8, 1.16.4, 1.17.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
1.15.8, 1.16.4, 1.17.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83255 - Improper input validation
CVE-2023-45283
CWE-20 Low
No
No
1.15.8, 1.16.4, 1.17.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 20 more
#VU83254 - Improper input validation
CVE-2023-45284
CWE-20 Low
No
No
1.15.8, 1.16.4, 1.17.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 18 more


Showing elements 1 - 20 out of 49