Known vulnerabilities in Nomad Enterprise
Vendor:
HashiCorp
Software:
Nomad Enterprise
Software CPE:
cpe:2.3:a:hashicorp:nomad_enterprise:*:*:*:*:*:nomad:*:*
Website:
https://www.hashicorp.com/
Total vulnerabilities:
16
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.0.5
1.11.8
1.10.14
2.0.4
1.11.7
1.10.13
2.0.3
1.11.6
1.10.12
2.0.2
1.11.5
1.10.11
2.0.1
2.0.0
1.11.4
1.10.10
1.10.9
1.8.21
1.11.3
1.11.2
1.10.8
1.8.20
1.10.7
1.8.19
1.11.1
1.10.6
1.8.18
1.11.0
1.9.13
1.8.17
1.10.5
1.9.12
1.8.16
1.10.4
1.9.11
1.8.15
1.10.3
1.9.10
1.8.14
1.10.2
1.10.1
1.9.9
1.8.13
1.9.8
1.8.12
1.10.0
1.8.11
1.7.19
1.9.7
1.9.6
1.8.10
1.7.18
1.8.9
1.7.17
1.9.5
1.7.16
1.8.8
1.9.4
1.9.3
1.7.15
1.8.7
1.9.2
1.8.6
1.8.5
1.7.14
1.7.13
1.7.12
1.7.11
1.7.10
1.7.9
1.7.8
1.6.15
1.6.14
1.6.13
1.6.12
1.6.11
1.9.1
1.9.0
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.7
1.6.10
1.5.17
1.7.6
1.6.9
1.5.16
1.7.5
1.6.8
1.5.15
1.7.4
1.6.7
1.5.14
1.7.3
1.6.6
1.5.13
1.7.2
1.6.5
1.5.12
1.7.1
1.7.0
1.6.4
1.5.11
1.6.3
1.5.10
1.4.14
1.6.2
1.5.9
1.4.13
1.3.16
1.6.1
1.5.8
1.4.12
1.6.0
1.5.7
1.4.11
1.5.6
1.4.10
1.3.15
1.5.5
1.5.4
1.4.9
1.3.14
1.5.3
1.4.8
1.3.13
1.5.2
1.4.7
1.3.12
1.5.1
1.4.6
1.3.11
1.5.0
1.4.5
1.3.10
1.4.4
1.3.9
1.2.16
1.4.3
1.3.8
1.2.15
1.4.2
1.3.7
1.2.14
1.4.1
1.4.0
1.3.6
1.2.13
1.3.5
1.2.12
1.1.18
1.3.4
1.2.11
1.1.17
1.3.3
1.2.10
1.1.16
1.3.2
1.2.9
1.1.15
1.3.1
1.2.8
1.1.14
1.3.0
1.2.7
1.1.13
1.2.6
1.1.12
1.0.18
1.2.5
1.1.11
1.0.17
1.2.4
1.1.10
1.0.16
1.2.3
1.1.9
1.0.15
1.2.2
1.2.0
1.1.7
1.0.13
1.1.6
1.0.12
1.1.5
1.0.11
1.0.10
1.1.4
1.0.9
1.1.3
1.0.8
1.1.2
1.0.7
1.1.1
1.0.6
1.1.0
0.12.12
1.0.5
0.12.11
1.0.4
0.12.10
1.0.3
1.0.2
0.0.0
1.0.1
1.0.0
0.10.9
0.11.8
0.12.9
0.12.8
0.10.8
0.11.7
0.12.7
0.10.7
0.11.6
0.10.6
0.11.5
0.12.6
0.12.5
0.12.4
0.12.3
0.12.2
0.11.4
0.12.1
0.12.0
0.11.3
0.11.2
0.11.1
0.11.0
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.7
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.1
0.7.0
0.6.3
0.6.2
0.6.1
0.6.0
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.3
0.4.2
0.4.1
0.4.0
0.3.2
0.3.1
0.3.0
0.2.3
0.2.2
0.2.1
0.2.0
0.1.2
0.1.1
0.1.0
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101892 - Incorrect Privilege Assignment CVE-2024-12678 |
CWE-266 | Medium | 1.7.16, 1.8.8, 1.9.4 | 20.12.2024 |
SB2024122062 |
||
| #VU100098 - Missing Authorization CVE-2024-10975 |
CWE-862 | Medium | 1.7.15, 1.8.7, 1.9.2 | 08.11.2024 |
SB2024110803 |
||
| #VU88829 - Argument Injection or Modification CVE-2024-3817 |
CWE-88 | High | 1.5.17, 1.6.10, 1.7.7 | 19.04.2024 |
SB2024041913 SB2024041914 SB2024072506 |
||
| #VU86537 - Untrusted Search Path |
CWE-426 | Low | 1.5.15, 1.6.8, 1.7.5 | 15.02.2024 |
SB2024021516 |
||
| #VU86277 - UNIX Symbolic Link (Symlink) Following CVE-2024-1329 |
CWE-61 | Low | 1.5.14, 1.6.7 | 08.02.2024 |
SB2024020871 |
||
| #VU85991 - Security Features CVE-2024-21626 |
CWE-254 | High | 1.5.14, 1.6.7 | 01.02.2024 |
SB2024020112 SB2024020113 SB2024020123 and 78 more |
||
| #VU78447 - Exposure of sensitive information to an unauthorized actor CVE-2023-3299 |
CWE-200 | Medium | 1.4.11, 1.5.7, 1.6.0 | 20.07.2023 |
SB2023072022 |
||
| #VU78446 - Exposure of sensitive information to an unauthorized actor CVE-2023-3300 |
CWE-200 | Medium | 1.4.1, 1.5.7, 1.6.0 | 20.07.2023 |
SB2023072023 |
||
| #VU78445 - Improper input validation CVE-2023-3072 |
CWE-20 | Low | 1.4.11, 1.5.7, 1.6.0 | 20.07.2023 |
SB2023072022 |
||
| #VU74577 - Improper Access Control CVE-2023-1782 |
CWE-284 | Medium | 1.5.3 | 06.04.2023 |
SB2023040681 |
||
| #VU74571 - Resource exhaustion CVE-2023-24534 |
CWE-400 | Medium | 1.3.13, 1.4.8, 1.5.3 | 06.04.2023 |
SB2023040668 SB2023040678 SB2023040679 and 85 more |
||
| #VU73273 - Improper Privilege Management CVE-2023-1299 |
CWE-269 | Medium | 1.5.1 | 14.03.2023 |
SB2023031408 |
||
| #VU73272 - Security Features CVE-2023-1296 |
CWE-254 | Medium | 1.4.6, 1.5.1 | 14.03.2023 |
SB2023031408 |
||
| #VU56139 - Permissions, Privileges, and Access Controls CVE-2021-37218 |
CWE-264 | Medium | 1.0.10, 1.1.4 | 27.08.2021 |
SB2021082710 |
||
| #VU24940 - Improper Certificate Validation CVE-2020-7956 |
CWE-295 | High | 0.10.3 | 05.02.2020 |
SB2020020509 |
||
| #VU24939 - Resource exhaustion CVE-2020-7218 |
CWE-400 | Medium | 0.10.3 | 05.02.2020 |
SB2020020509 SB2020013133 |