Login Request a demo
PU
Vendor
Puppet
30 products with CVEs on record
183
CVEs
0
On KEV
0
New 30D
Products
PE
Puppet Enterprise
Puppet
9.8
89 CVEs0 on KEV0 new
PU
Puppet
Puppet
9.8
42 CVEs0 on KEV0 new
PA
Puppet Agent
Puppet
9.8
8 CVEs0 on KEV0 new
PS
Puppet Server
Puppet
9.8
7 CVEs0 on KEV0 new
CD
Continuous Delivery
Puppet
8.1
4 CVEs0 on KEV0 new
MC
Marionette Collective
Puppet
9.8
3 CVEs0 on KEV0 new
PU
Puppetdb
Puppet
8.8
3 CVEs0 on KEV0 new
PU
puppetlabs-mysql
Puppet
9.8
3 CVEs0 on KEV0 new
DI
Discovery
Puppet
9.8
2 CVEs0 on KEV0 new
FA
Facter
Puppet
–
2 CVEs0 on KEV0 new
BO
Bolt
Puppet
9.8
1 CVEs0 on KEV0 new
CH
Chloride
Puppet
7.5
1 CVEs0 on KEV0 new
CI
Cisco Ios
Puppet
5.5
1 CVEs0 on KEV0 new
CI
Cisco Ios Module
Puppet
6.5
1 CVEs0 on KEV0 new
DM
Device Manager
Puppet
7.8
1 CVEs0 on KEV0 new
FI
Firewall
Puppet
9.8
1 CVEs0 on KEV0 new
HI
Hiera
Puppet
–
1 CVEs0 on KEV0 new
MC
Mcollective
Puppet
9.0
1 CVEs0 on KEV0 new
MC
Mcollective-puppet-agent
Puppet
8.8
1 CVEs0 on KEV0 new
MC
Mcollective-sshkey-security
Puppet
6.5
1 CVEs0 on KEV0 new
PE
Pe-razor-server
Puppet
9.8
1 CVEs0 on KEV0 new
PC
Puppet Connect
Puppet
4.4
1 CVEs0 on KEV0 new
PD
Puppet Dashboard
Puppet
–
1 CVEs0 on KEV0 new
PD
Puppet Discovery
Puppet
9.8
1 CVEs0 on KEV0 new
PE
Puppet Enterprise Client Tools
Puppet
7.8
1 CVEs0 on KEV0 new
PU
Puppetlabs-apache
Puppet
7.5
1 CVEs0 on KEV0 new
PU
puppetlabs-apt
Puppet
9.8
1 CVEs0 on KEV0 new
RA
Razor-server
Puppet
9.8
1 CVEs0 on KEV0 new
RE
Remediate
Puppet
7.5
1 CVEs0 on KEV0 new
ST
Stdlib
Puppet
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-5459
PE
Puppet Enterprise
Puppet
8.8
1%
Jun 26A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host
CVE-2023-5309
PE
Puppet Enterprise
Puppet
9.8
0%
Nov 7Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations
CVE-2023-5214
BO
Bolt
Puppet
9.8
0%
Oct 6In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified
CVE-2023-5255
PS
Puppet Server
Puppet
7.5
0%
Oct 3For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked
CVE-2023-2530
PE
Puppet Enterprise
Puppet
9.8
1%
Jun 7A privilege escalation allowing remote code execution was discovered in the orchestration service
CVE-2023-1894
PE
Puppet Enterprise
Puppet
5.3
0%
May 4A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation
CVE-2022-3276
PU
puppetlabs-mysql
Puppet
8.8
2%
Oct 7Puppetlabs-mysql Command Injection
CVE-2022-3275
PU
puppetlabs-apt
Puppet
9.8
2%
Oct 7Puppetlabs-apt Command Injection
CVE-2022-0675
FI
Firewall
Puppet
9.8
1%
Mar 2In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest
CVE-2021-27026
PC
Puppet Connect
Puppet
4.4
0%
Nov 18A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
CVE-2021-27025
PU
Puppet
Puppet
6.5
1%
Nov 18A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'
CVE-2021-27024
CD
Continuous Delivery
Puppet
8.1
1%
Nov 18A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token
CVE-2021-27023
PA
Puppet Agent
Puppet
9.8
1%
Nov 18A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host
CVE-2021-27022
PU
Puppet
Puppet
4.9
1%
Sep 7A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be
CVE-2021-27020
PE
Puppet Enterprise
Puppet
8.8
1%
Aug 30Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export
CVE-2021-27019
PE
Puppet Enterprise
Puppet
4.3
1%
Aug 30PuppetDB logging included potentially sensitive system information
CVE-2021-27018
RE
Remediate
Puppet
7.5
1%
Aug 30The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly…
CVE-2021-27021
PU
Puppet
Puppet
8.8
1%
Jul 20A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query
CVE-2020-7945
CD
Continuous Delivery
Puppet
5.5
0%
Sep 18Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them
CVE-2020-7944
CD
Continuous Delivery
Puppet
7.7
1%
Mar 26In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up…
CVE-2020-7943
PE
Puppet Enterprise
Puppet
7.5
8%
Mar 11Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints
CVE-2015-5686
PE
Puppet Enterprise
Puppet
8.8
0%
Feb 27Parts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF (Cross-Site Request Forgery) attacks
CVE-2020-7942
PU
Puppet
Puppet
6.5
1%
Feb 19Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to…
CVE-2018-11751
PS
Puppet Server
Puppet
5.4
1%
Dec 16Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL
CVE-2014-0175
MC
Marionette Collective
Puppet
9.8
2%
Dec 13mcollective has a default password set at install
CVE-2019-10695
CD
Continuous Delivery
Puppet
6.5
1%
Dec 12When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details…
CVE-2019-10694
PE
Puppet Enterprise
Puppet
9.8
1%
Dec 12The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password
CVE-2013-4968
PE
Puppet Enterprise
Puppet
6.1
1%
Dec 11Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting…
CVE-2015-1855
PE
Puppet Enterprise
Puppet
5.9
3%
Nov 29verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which…
CVE-2018-11747
PD
Puppet Discovery
Puppet
9.8
1%
Mar 17Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container
CVE-2018-6517
CH
Chloride
Puppet
7.5
1%
Mar 17Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation
CVE-2018-11752
CI
Cisco Ios
Puppet
5.5
0%
Oct 2Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run
CVE-2018-11750
CI
Cisco Ios Module
Puppet
6.5
1%
Oct 2Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection
CVE-2018-11748
DM
Device Manager
Puppet
7.8
0%
Oct 2Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world readable
CVE-2018-11749
PE
Puppet Enterprise
Puppet
9.8
1%
Aug 24When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server
CVE-2018-11746
DI
Discovery
Puppet
9.8
1%
Jul 3In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is…
CVE-2018-6516
PE
Puppet Enterprise Client Tools
Puppet
7.8
1%
Jun 14On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6,…
CVE-2018-6515
PU
Puppet
Puppet
7.8
1%
Jun 11Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an…
CVE-2018-6514
PU
Puppet
Puppet
7.8
1%
Jun 11In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which…
CVE-2018-6513
PU
Puppet
Puppet
8.8
1%
Jun 11Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13,…
CVE-2018-6512
PE
Pe-razor-server
Puppet
9.8
2%
Jun 11The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server
CVE-2018-6511
PE
Puppet Enterprise
Puppet
5.4
1%
May 8A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet…
CVE-2018-6510
PE
Puppet Enterprise
Puppet
5.4
1%
May 8A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the…
CVE-2018-6508
PE
Puppet Enterprise
Puppet
8.0
2%
Feb 9Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks
CVE-2017-10690
PU
Puppet
Puppet
6.5
1%
Feb 9In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from
CVE-2017-10689
PE
Puppet Enterprise
Puppet
5.5
0%
Feb 9In previous versions of Puppet Agent it was possible to install a module with world writable permissions
CVE-2017-2297
PE
Puppet Enterprise
Puppet
7.5
1%
Feb 1Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens
CVE-2017-2296
PE
Puppet Enterprise
Puppet
6.5
1%
Feb 1In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes…
CVE-2017-2293
PE
Puppet Enterprise
Puppet
4.9
1%
Feb 1Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on…
CVE-2015-7224
PU
Puppetlabs-mysql
Puppet
9.8
2%
Dec 21puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user…
CVE-2015-4100
PE
Puppet Enterprise
Puppet
6.8
1%
Dec 21Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a…
CVE-2015-8470
PE
Puppet Enterprise
Puppet
6.5
2%
Dec 11The console in Puppet Enterprise 3.7.x, 3.8.x, and 2015.2.x does not set the secure flag for the JSESSIONID cookie in an HTTPS session, which makes it easier for remote attackers…
CVE-2015-6502
PE
Puppet Enterprise
Puppet
6.1
1%
Dec 11Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string…
CVE-2014-3250
PU
Puppet
Puppet
6.5
1%
Dec 11The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information…
CVE-2016-5713
PA
Puppet Agent
Puppet
9.8
2%
Dec 6Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs
CVE-2016-5714
PE
Puppet Enterprise
Puppet
7.2
2%
Oct 18Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelist protection mechanism and execute…
CVE-2017-2299
PU
Puppetlabs-apache
Puppet
7.5
1%
Sep 15Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust
CVE-2016-5716
PE
Puppet Enterprise
Puppet
8.8
2%
Aug 9The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node
CVE-2017-7529
PE
Puppet Enterprise
Puppet
7.5
63%
Jul 13Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive…
CVE-2017-2295
PU
Puppet
Puppet
8.2
3%
Jul 5Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format