Latest vulnerabilities for "github enterprise server"

5.7

EPSS

0.05%

First published (updated )

CVE-2024-9539

GitHub Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled

9.5

EPSS

0.83%

First published (updated )

CVE-2024-9487

GitHub Enterprise ServerAn improper privilege management vulnerability allowed arbitrary workflows to be committed using an …

6.2

EPSS

0.06%

First published (updated )

CVE-2024-8263

GitHub Enterprise ServerXSS

6.1

EPSS

0.05%

First published (updated )

CVE-2024-8770

GitHub Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

9.8

EPSS

0.04%

First published (updated )

CVE-2024-6800

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerIncorrect Authorization allows read access to issues in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-6337

GitHub Enterprise ServerAn Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an att…

5.3

EPSS

0.05%

First published (updated )

CVE-2024-7711

GitHub Enterprise ServerGitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

6.3

EPSS

0.04%

First published (updated )

CVE-2024-6395

GitHub Enterprise ServerSecurity misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

6.9

EPSS

0.04%

First published (updated )

CVE-2024-6336

GitHub Enterprise ServerImproper authorization allows read access to issue content in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5817

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerImproper authorization allows persistent access in GitHub Enterprise Server

6.9

EPSS

0.04%

First published (updated )

CVE-2024-5816

GitHub Enterprise ServerCross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository

6.8

EPSS

0.04%

First published (updated )

CVE-2024-5815

GitHub Enterprise ServerDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

7.7

EPSS

0.04%

First published (updated )

CVE-2024-5795

GitHub Enterprise ServerImproper Privilege Management allows for access to unauthorized repository content during migration

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5566

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1378

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1374

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1372

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1369

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1359

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1355

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

8

First published (updated )

CVE-2024-1354

GitHub Enterprise ServerPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload

6.5

First published (updated )

CVE-2024-1082

GitHub Enterprise ServerXSS, CSRF

6.5

First published (updated )

CVE-2024-1084

GitHub Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

8.8

EPSS

0.06%

First published (updated )

CVE-2024-0507

GitHub Enterprise ServerUnsafe Reflection in Github Enterprise Server leading to Command Injection

9.8

EPSS

0.37%

First published (updated )

CVE-2024-0200

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

7.5

EPSS

0.06%

First published (updated )

CVE-2023-6847

GitHub Enterprise ServerIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

4.3

First published (updated )

CVE-2023-51380

GitHub Enterprise ServerIncorrect Authorization for Issue Comments in GitHub Enterprise Server

4.9

First published (updated )

CVE-2023-51379

GitHub Enterprise ServerInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

8.3

First published (updated )

CVE-2023-46648

GitHub Enterprise ServerRace Condition allows Administrative Access on Organization Repositories

7

First published (updated )

CVE-2023-46649

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerImproper Privilege Management allows for arbitrary workflows to be run

6.5

EPSS

0.04%

First published (updated )

CVE-2023-6804

GitHub Enterprise ServerRace Condition allows Unauthorized Outside Collaborator

5.8

EPSS

0.04%

First published (updated )

CVE-2023-6803

GitHub Enterprise ServerSensitive Information in Log File in GitHub Enterprise Server

7.2

EPSS

0.06%

First published (updated )

CVE-2023-6802

GitHub Enterprise ServerSensitive Information in Log File in GitHub Enterprise Server

8.1

EPSS

0.09%

First published (updated )

CVE-2023-6746

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

6.8

First published (updated )

CVE-2023-46645

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerRace Condition

low

3.9

EPSS

0.08%

First published (updated )

CVE-2023-6690

GitHub Enterprise ServerImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation

8.8

First published (updated )

CVE-2023-46647

GitHub Enterprise ServerImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to vie…

5.3

First published (updated )

CVE-2023-46646

GitHub Enterprise ServerIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

6.5

First published (updated )

CVE-2023-23766

GitHub Enterprise ServerInformation disclosure in GitHub Enterprise Server leading to private repository leakage

5.3

First published (updated )

CVE-2023-23763

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

6.5

First published (updated )

CVE-2023-23765

GitHub Enterprise ServerIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

7.1

First published (updated )

CVE-2023-23764

GitHub Enterprise ServerIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

6.5

First published (updated )

CVE-2023-23762

GitHub Enterprise ServerImproper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists

7.7

First published (updated )

CVE-2023-23761

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to remote code execution

8.8

First published (updated )

CVE-2023-23760

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerInformation disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names

4.3

First published (updated )

CVE-2022-46257

GitHub Enterprise ServerCode injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions

8.8

First published (updated )

CVE-2023-22381

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

6.5

First published (updated )

CVE-2023-22380

GitHub Enterprise ServerIncorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens

9.8

First published (updated )

CVE-2022-23739

GitHub Enterprise ServerIncorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope

6.5

First published (updated )

CVE-2022-46258

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.