Known vulnerabilities in Puppet Enterprise - page 2

Software CPE: cpe:2.3:a:puppet_labs:puppet_enterprise:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Enterprise Puppet Enterprise is affected by 39 known vulnerabilities: 4 high, 23 medium, 12 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU10960 - Improper input validation
CVE-2018-6508
CWE-20 High
No
No
- 13.03.2018 SB2018020512
#VU38511 - Use of Externally-Controlled Format String
CVE-2016-5716
CWE-134 High
No
No
- 09.08.2017 SB2017080924
#VU39662 - Improper Access Control
CVE-2016-2787
CWE-284 Medium
No
No
- 13.02.2017 SB2017021306
#VU39671 - Improper input validation
CVE-2016-9686
CWE-20 Medium
No
No
- 09.02.2017 SB2017020926
#VU40539 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7328
CWE-200 Low
No
No
- 08.01.2016 SB2016010803
#VU41547 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3249
CWE-200 Medium
No
No
- 17.06.2014 SB2014061706
#VU41914 - Cross-Site Request Forgery (CSRF)
CVE-2013-4963
CWE-352 Medium
No
No
- 14.03.2014 SB2013102601
#VU41957 - Improper Authentication
CVE-2013-4966
CWE-287 Medium
No
No
- 09.03.2014 SB2014030902
#VU41958 - Permissions, Privileges, and Access Controls
CVE-2013-4971
CWE-264 Medium
No
No
- 09.03.2014 SB2014030902
#VU42421 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4957
CWE-94 Medium
No
No
- 26.10.2013 SB2013102601
#VU42422 - Improper Authentication
CVE-2013-4965
CWE-287 Medium
No
No
- 26.10.2013 SB2013102603
#VU42643 - Improper input validation
CVE-2013-4762
CWE-20 Medium
No
No
- 21.08.2013 SB2013082103
#VU42644 - Improper input validation
CVE-2013-4955
CWE-20 Medium
No
No
- 21.08.2013 SB2013082103
#VU42646 - Improper Authentication
CVE-2013-4958
CWE-287 High
No
No
- 21.08.2013 SB2013082103
#VU42647 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4959
CWE-200 Low
No
No
- 21.08.2013 SB2013082103
#VU42648 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4961
CWE-200 Medium
No
No
- 21.08.2013 SB2013082103
#VU42649 - Credentials Management
CVE-2013-4962
CWE-255 Medium
No
No
- 21.08.2013 SB2013082103
#VU42650 - Permissions, Privileges, and Access Controls
CVE-2013-4964
CWE-264 Medium
No
No
- 21.08.2013 SB2013082103
#VU42651 - Credentials Management
CVE-2013-4967
CWE-255 Medium
No
No
- 21.08.2013 SB2013082103


Showing elements 21 - 40 out of 39