GitLab Enterprise Edition

Name: GitLab Enterprise Edition
Brand: GitLab

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical6high7medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27407US	—	3.10% (88th)	Exploit	no fix	2025-03-12	14 versions
CVE-2025-25292US	critical9.8	65.1% (99th)	—	no fix	2025-03-12	14 versions
CVE-2025-25291US	critical9.8	21.0% (98th)	—	no fix	2025-03-12	14 versions
CVE-2024-13054US	medium6.5	0.65% (51st)	—	no fix	2025-03-13	14 versions
CVE-2025-8014US	—	0.59% (48th)	—	no fix	2025-09-27	≤ vers:unknown/*
CVE-2025-10858US	—	0.58% (48th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2024-12380US	high7.5	0.57% (47th)	—	no fix	2025-03-13	14 versions
CVE-2025-9642US	critical9.6	0.56% (46th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-10004US	—	0.53% (45th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2025-2934US	medium6.5	0.53% (45th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2025-9958US	—	0.51% (43rd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-1257US	high7.5	0.46% (40th)	—	no fix	2025-03-13	14 versions
CVE-2025-0652US	medium6.5OT elevated	0.42% (36th)	—	no fix	2025-03-13	14 versions
CVE-2025-9825US	medium6.5OT elevated	0.39% (33rd)	—	no fix	2025-11-21	≤ vers:unknown/*
CVE-2025-7691US	high8.8	0.38% (32nd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-10871US	high7.2OT elevated	0.38% (32nd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-11340US	—OT elevated	0.37% (31st)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2024-7296US	—OT elevated	0.36% (30th)	—	no fix	2025-03-13	14 versions
CVE-2025-10867US	medium6.5	0.34% (27th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-11042US	high7.5	0.32% (25th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-10868US	medium5.3	0.26% (18th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-5069US	medium6.5	0.25% (16th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2024-8402US	high7.4	0.24% (15th)	—	no fix	2025-03-13	14 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling8 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-436Interpretation Conflict2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-267Privilege Defined With Unsafe Actions1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan