ES
Product
Enterprise Server
129
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 20High 40Medium 65Low 4
Watch
Add Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8447 | 3.1 | Aug 26 | Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access Affected: 3.14 through 3.14.16; 3.15 through 3.15.11; 3.16 through 3.16.7; 3.17 through 3.17.4 |
| CVE-2026-3307 | 2.7 | Apr 21 | Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers Affected: 3.14.0 through 3.14.24; 3.15.0 through 3.15.19; 3.16.0 through 3.16.15; 3.17.0 through 3.17.12; 3.18.0 through 3.18.6; 3.19.0 through 3.19.3; +1 more |
| CVE-2024-8263 | 2.7 | Sep 23 | An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags Affected: 3.10.0 before 3.10.17; 3.11.0 before 3.11.15; 3.12.0 before 3.12.9; 3.13.0 before 3.13.4; 3.14.0 |
| CVE-2023-6690 | 2.0 | Dec 21 | A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository… Affected: 3.8.0 before 3.8.12; 3.9.0 before 3.9.7; 3.10.0 before 3.10.4; 3.11.0 |
Showing 4