gradle gradle

Name: gradle gradle
Brand: gradle

productUS

cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical13high7medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-29427US	high7.2	1.31% (70th)	Exploit	7.0	2021-04-13	5.1 → 7.0
CVE-2020-11979US	high7.5	7.76% (95th)	—	6.8.0	2020-10-01	< 6.8.0
CVE-2016-6199US	critical9.8	4.67% (92nd)	—	no fix	2017-02-07	= 2.12
CVE-2019-15052US	critical9.8	2.93% (87th)	—	5.6	2019-08-14	< 5.6
CVE-2021-32751US	high7.5	2.71% (86th)	—	7.2	2021-07-20	< 7.2
CVE-2022-30586US	high7.2	1.38% (72nd)	—	1.3.1	2022-06-06	< 1.3.1
CVE-2019-11065US	medium5.9OT elevated	1.36% (72nd)	—	no fix	2019-04-10	1.4 → 5.3.1
CVE-2022-23630US	high7.5	1.32% (71st)	—	no fix	2022-02-10	6.2.0 → 7.3.3
CVE-2021-41584US	high7.5	1.31% (70th)	—	2021.1.3	2021-09-24	2020.4 → 2021.1.3
CVE-2023-26053US	critical9.8	0.99% (62nd)	—	6.9.4	2023-03-02	2 versions
CVE-2021-41587US	high7.5	0.93% (61st)	—	2021.1.3	2021-09-24	2017.6 → 2021.1.3
CVE-2019-16370US	medium5.9OT elevated	0.89% (59th)	—	6.0	2019-09-16	< 6.0
CVE-2021-41588US	high8.1	0.80% (56th)	—	2021.1.3	2021-09-24	2017.2 → 2021.1.3
CVE-2021-41586US	high7.5	0.78% (56th)	—	2021.1.3	2021-09-24	2020.4 → 2021.1.3
CVE-2023-42445US	medium5.3	0.78% (56th)	—	8.4.0	2023-10-06	2 versions
CVE-2022-31156US	medium4.4	0.56% (46th)	—	7.5.0	2022-07-14	6.2.0 → 7.5.0
CVE-2021-29428US	high7.8	0.54% (45th)	—	7.0	2021-04-13	< 7.0
CVE-2023-35947US	high8.1	0.53% (45th)	—	8.2.0	2023-06-30	2 versions
CVE-2021-29429US	medium5.5	0.48% (42nd)	—	7.0	2021-04-12	< 7.0
CVE-2023-35946US	medium5.5	0.28% (21st)	—	7.6.2	2023-06-30	2 versions
CVE-2023-44387US	medium6.5	0.22% (13th)	—	7.6.3	2023-10-05	2 versions
CVE-2026-22816US	high7.4OT elevated	0.17% (7th)	—	8.14.4	2026-01-16	2 versions
CVE-2026-22865US	high7.4OT elevated	0.16% (5th)	—	9.3.0	2026-01-16	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-829Inclusion of Functionality from Untrusted Control Sphere6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-377Insecure Temporary File2 CVEs
CWE-379Creation of Temporary File in Directory with Insecure Permissions2 CVEs
CWE-494Download of Code Without Integrity Check2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan