EN
Product
Enterprise
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 8Low 0
Watch
Add Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49238 | 9.8 | Jan 9 | In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system… Affected: before 2023.1 |
| CVE-2022-27919 | 9.8 | Mar 25 | Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file Affected: 2020.4 through 2021.4.3 |
| CVE-2021-41589 | 9.8 | Oct 27 | In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node… Affected: before 2021.3 |
| CVE-2019-11403 | 9.8 | Apr 22 | In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page Affected: before 2018.5.2 |
| CVE-2019-11402 | 9.8 | Apr 22 | In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format Affected: before 2018.5.3 |
Showing 5