Known vulnerabilities in Puppet Enterprise - page 2

Software CPE: cpe:2.3:a:puppet_labs:puppet_enterprise:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Puppet Enterprise Puppet Enterprise is affected by 39 known vulnerabilities: 4 high, 23 medium, 12 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU815 - Heap-based Buffer Overflow
CVE-2016-6303
CWE-122 Low
No
No
2016.4.0 10.10.2016 SB2018021614
SB2016091929
SB2023030219
and 6 more
#VU646 - Resource exhaustion
CVE-2016-6304
CWE-400 Medium
No
No
2016.4.0 23.09.2016 SB2017060704
SB2018021614
SB2016092205
and 16 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
2016.4.0 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more
#VU40539 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7328
CWE-200 Low
No
No
- 08.01.2016 SB2016010803
#VU41547 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3249
CWE-200 Medium
No
No
- 17.06.2014 SB2014061706
#VU41914 - Cross-Site Request Forgery (CSRF)
CVE-2013-4963
CWE-352 Medium
No
No
- 14.03.2014 SB2013102601
#VU41917 - Insufficient Session Expiration
CVE-2012-5158
CWE-613 Low
No
No
2.6.1 14.03.2014 SB2014031417
#VU41957 - Improper Authentication
CVE-2013-4966
CWE-287 Medium
No
No
- 09.03.2014 SB2014030902
#VU41958 - Permissions, Privileges, and Access Controls
CVE-2013-4971
CWE-264 Medium
No
No
- 09.03.2014 SB2014030902
#VU42421 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4957
CWE-94 Medium
No
No
- 26.10.2013 SB2013102601
#VU42422 - Improper Authentication
CVE-2013-4965
CWE-287 Medium
No
No
- 26.10.2013 SB2013102603
#VU42643 - Improper input validation
CVE-2013-4762
CWE-20 Medium
No
No
- 21.08.2013 SB2013082103
#VU42644 - Improper input validation
CVE-2013-4955
CWE-20 Medium
No
No
- 21.08.2013 SB2013082103
#VU42646 - Improper Authentication
CVE-2013-4958
CWE-287 High
No
No
- 21.08.2013 SB2013082103
#VU42647 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4959
CWE-200 Low
No
No
- 21.08.2013 SB2013082103
#VU42648 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4961
CWE-200 Medium
No
No
- 21.08.2013 SB2013082103
#VU42649 - Credentials Management
CVE-2013-4962
CWE-255 Medium
No
No
- 21.08.2013 SB2013082103
#VU42650 - Permissions, Privileges, and Access Controls
CVE-2013-4964
CWE-264 Medium
No
No
- 21.08.2013 SB2013082103
#VU42651 - Credentials Management
CVE-2013-4967
CWE-255 Medium
No
No
- 21.08.2013 SB2013082103


Showing elements 21 - 40 out of 39