Known vulnerabilities in Puppet Enterprise

Software CPE: cpe:2.3:a:puppet_labs:puppet_enterprise:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Enterprise Puppet Enterprise is affected by 39 known vulnerabilities: 4 high, 23 medium, 12 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111961 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-5459
CWE-78 Medium
No
No
2023.8.4, 2025.4.0 26.06.2025 SB2025062614
#VU83504 - Inefficient Regular Expression Complexity
CVE-2023-1894
CWE-1333 Medium
No
No
2021.7.3, 2023.1.0 27.11.2023 SB2023050457
SB2023112747
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
2019.8.9, 2021.4.0 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU62793 - Resource Management Errors
CVE-2021-27025
CWE-399 Low
No
No
2019.8.9, 2021.4.0 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU54500 - Permissions, Privileges, and Access Controls
CVE-2021-27021
CWE-264 Low
No
No
2019.8.7, 2021.2.0 01.07.2021 SB2021070123
SB2021070125
#VU10960 - Improper input validation
CVE-2018-6508
CWE-20 High
No
No
- 13.03.2018 SB2018020512
#VU38511 - Use of Externally-Controlled Format String
CVE-2016-5716
CWE-134 High
No
No
- 09.08.2017 SB2017080924
#VU39662 - Improper Access Control
CVE-2016-2787
CWE-284 Medium
No
No
- 13.02.2017 SB2017021306
#VU39671 - Improper input validation
CVE-2016-9686
CWE-20 Medium
No
No
- 09.02.2017 SB2017020926
#VU1975 - Improper input validation
CVE-2016-2181
CWE-20 Medium
No
No
2016.4.0 21.12.2016 SB2018021614
SB2016091928
SB2023030219
and 14 more
#VU1974 - Resource Management Errors
CVE-2016-2179
CWE-399 Medium
No
No
2016.4.0 21.12.2016 SB2018021614
SB2016091930
SB2023030219
and 14 more
#VU1968 - Out-of-bounds write
CVE-2016-2182
CWE-787 High
No
No
2016.4.0 21.12.2016 SB2018021614
SB2016091935
SB2023022033
and 14 more
#VU1589 - Observable discrepancy
CVE-2016-2178
CWE-203 Low
No
No
2016.4.0 21.12.2016 SB2018021614
SB2016062205
SB2023022033
and 18 more
#VU818 - Resource exhaustion
CVE-2016-6308
CWE-400 Low
No
No
2016.4.0 10.10.2016 SB2016092613
SB2023030219
SB2018110640
and 2 more
#VU817 - Resource exhaustion
CVE-2016-6307
CWE-400 Low
No
No
2016.4.0 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU816 - Out-of-bounds read
CVE-2016-6306
CWE-125 Low
No
No
2016.4.0 10.10.2016 SB2018021614
SB2016092238
SB2023022033
and 17 more
#VU814 - Out-of-bounds read
CVE-2016-6302
CWE-125 Medium
No
No
2016.4.0 10.10.2016 SB2018021614
SB2016091931
SB2023022033
and 15 more
#VU645 - State Issues
CVE-2016-6305
CWE-371 Low
No
No
2016.4.0 23.09.2016 SB2016092205
SB2023030219
SB2018110640
and 3 more
#VU308 - Out-of-bounds read
CVE-2016-2180
CWE-125 Medium
No
No
2016.4.0 13.08.2016 SB2016081301
SB2018021614
SB2016090301
and 14 more
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177
CWE-119 Medium
No
No
2016.4.0 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 19 more


Showing elements 1 - 20 out of 39