EN
Product
Enterprise
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 8Low 0
Watch
Add Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49238 | 9.8 | Jan 9 | In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system… Affected: before 2023.1 |
| CVE-2022-27919 | 9.8 | Mar 25 | Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file Affected: 2020.4 through 2021.4.3 |
| CVE-2021-41589 | 9.8 | Oct 27 | In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node… Affected: before 2021.3 |
| CVE-2019-11403 | 9.8 | Apr 22 | In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page Affected: before 2018.5.2 |
| CVE-2019-11402 | 9.8 | Apr 22 | In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format Affected: before 2018.5.3 |
| CVE-2020-15776 | 8.8 | Sep 18 | An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4 Affected: 2018.2 through 2020.2.4 |
| CVE-2022-25364 | 8.1 | Mar 17 | In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access Affected: before 2021.4.2 |
| CVE-2022-41575 | 7.5 | Oct 21 | A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data… Affected: 2022.3 before 2022.3.3 |
| CVE-2022-41574 | 7.5 | Oct 7 | An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content… Affected: 2020.4 before 2022.3.2 |
| CVE-2020-15775 | 7.5 | Sep 18 | An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4 Affected: 2017.1 through 2020.2.4 |
| CVE-2020-15771 | 7.5 | Sep 18 | An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1 Affected: 2018.2 |
| CVE-2020-15768 | 7.5 | Sep 18 | An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2 Affected: 2017.3 through 2020.2.4 |
| CVE-2021-41619 | 7.2 | Oct 27 | An issue was discovered in Gradle Enterprise before 2021.1.2 Affected: 2020.4 before 2021.1.2 |
| CVE-2020-15774 | 6.8 | Sep 18 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4 Affected: 2018.5 through 2020.2.4 |
| CVE-2022-27225 | 6.5 | Mar 16 | Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations Affected: 2020.1 before 2021.4.3 |
| CVE-2020-15773 | 6.5 | Sep 18 | An issue was discovered in Gradle Enterprise before 2020.2.4 Affected: before 2020.2.4 |
| CVE-2020-15769 | 6.1 | Sep 18 | An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4 Affected: 2020.2 through 2020.2.4 |
| CVE-2020-15770 | 5.5 | Sep 18 | An issue was discovered in Gradle Enterprise 2018.5 Affected: 2018.5 |
| CVE-2021-41590 | 5.3 | Oct 27 | In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test Affected: 2020.4 before 2021.3 |
| CVE-2020-15767 | 5.3 | Sep 18 | An issue was discovered in Gradle Enterprise before 2020.2.5 Affected: before 2020.2.5 |
| CVE-2020-15772 | 4.9 | Sep 18 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4 Affected: 2018.5 through 2020.2.4 |
Showing 21