Known vulnerabilities in Nomad Enterprise

Vendor: HashiCorp
Software CPE: cpe:2.3:a:hashicorp:nomad_enterprise:*:*:*:*:*:nomad:*:*
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nomad Enterprise Nomad Enterprise is affected by 16 known vulnerabilities: 3 high, 10 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101892 - Incorrect Privilege Assignment
CVE-2024-12678
CWE-266 Medium
No
No
1.7.16, 1.8.8, 1.9.4 20.12.2024 SB2024122062
#VU100098 - Missing Authorization
CVE-2024-10975
CWE-862 Medium
No
No
1.7.15, 1.8.7, 1.9.2 08.11.2024 SB2024110803
#VU88829 - Argument Injection or Modification
CVE-2024-3817
CWE-88 High
No
No
1.5.17, 1.6.10, 1.7.7 19.04.2024 SB2024041913
SB2024041914
SB2024072506
#VU86537 - Untrusted Search Path
CWE-426 Low
No
No
1.5.15, 1.6.8, 1.7.5 15.02.2024 SB2024021516
#VU86277 - UNIX Symbolic Link (Symlink) Following
CVE-2024-1329
CWE-61 Low
No
No
1.5.14, 1.6.7 08.02.2024 SB2024020871
#VU85991 - Security Features
CVE-2024-21626
CWE-254 High
Available
No
1.5.14, 1.6.7 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU78447 - Exposure of sensitive information to an unauthorized actor
CVE-2023-3299
CWE-200 Medium
No
No
1.4.11, 1.5.7, 1.6.0 20.07.2023 SB2023072022
#VU78446 - Exposure of sensitive information to an unauthorized actor
CVE-2023-3300
CWE-200 Medium
No
No
1.4.1, 1.5.7, 1.6.0 20.07.2023 SB2023072023
#VU78445 - Improper input validation
CVE-2023-3072
CWE-20 Low
No
No
1.4.11, 1.5.7, 1.6.0 20.07.2023 SB2023072022
#VU74577 - Improper Access Control
CVE-2023-1782
CWE-284 Medium
No
No
1.5.3 06.04.2023 SB2023040681
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.3.13, 1.4.8, 1.5.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU73273 - Improper Privilege Management
CVE-2023-1299
CWE-269 Medium
No
No
1.5.1 14.03.2023 SB2023031408
#VU73272 - Security Features
CVE-2023-1296
CWE-254 Medium
No
No
1.4.6, 1.5.1 14.03.2023 SB2023031408
#VU56139 - Permissions, Privileges, and Access Controls
CVE-2021-37218
CWE-264 Medium
No
No
1.0.10, 1.1.4 27.08.2021 SB2021082710
#VU24940 - Improper Certificate Validation
CVE-2020-7956
CWE-295 High
No
No
0.10.3 05.02.2020 SB2020020509
#VU24939 - Resource exhaustion
CVE-2020-7218
CWE-400 Medium
No
No
0.10.3 05.02.2020 SB2020020509
SB2020013133