ES
Product
Enterprise Server
129
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 20High 40Medium 65Low 4
Watch
Add Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51379 | 4.9 | Dec 21 | Incorrect Authorization for Issue Comments in GitHub Enterprise Server Affected: 3.7.0 through 3.7.18; 3.8.0 through 3.8.11; 3.9.0 through 3.9.6; 3.10.0 through 3.10.3; 3.11 through 3.11.0 |
| CVE-2023-46645 | 4.9 | Dec 21 | Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site Affected: 3.7.0 before 3.7.19; 3.8.0 before 3.8.12; 3.9.0 before 3.9.7; 3.10.0 before 3.8.4; 3.11.0 before 3.11.1 |
| CVE-2026-5512 | 4.3 | Apr 21 | Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API Affected: 3.14.0 through 3.14.25; 3.15.0 through 3.15.20; 3.16.0 through 3.16.16; 3.17.0 through 3.17.13; 3.18.0 through 3.18.7; 3.19.0 through 3.19.4; +1 more |
| CVE-2026-3582 | 4.3 | Mar 10 | Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope Affected: 3.16.0 through 3.16.14; 3.17.0 through 3.17.11; 3.18.0 through 3.18.5; 3.19.0 through 3.19.2 |
| CVE-2026-3306 | 4.3 | Mar 10 | Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access Affected: 3.14.0 through 3.14.23; 3.15.0 through 3.15.18; 3.16.0 through 3.16.14; 3.17.0 through 3.17.11; 3.18.0 through 3.18.5; 3.19.0 through 3.19.2 |
| CVE-2025-6981 | 4.3 | Jul 15 | Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only access Affected: 3.14.0 before 3.14.15; 3.15.0 before 3.15.10; 3.16.0 before 3.16.6; 3.17.0 before 3.17.3 |
| CVE-2025-6600 | 4.3 | Jul 1 | GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API Affected: 3.17.0 before 3.17.2 |
| CVE-2025-3124 | 4.3 | Apr 17 | Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names Affected: 3.13.0 through 3.13.13; 3.14.0 through 3.14.10; 3.15.0 through 3.15.5; 3.16.0 through 3.16.1 |
| CVE-2024-9539 | 4.3 | Oct 11 | An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user… Affected: before 3.11.16; 3.12.0 before 3.12.10; 3.13.0 before 3.13.5; 3.14.0 before 3.14.2 |
| CVE-2024-7711 | 4.3 | Aug 20 | An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public… Affected: 3.11.0 before 3.11.14; 3.12.0 before 3.12.8; 3.13.0 before 3.13.3 |
| CVE-2024-2748 | 4.3 | Mar 20 | CSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user Affected: 3.12 through 3.12.0 |
| CVE-2023-51380 | 4.3 | Dec 21 | Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server Affected: 3.7.0 through 3.7.18; 3.8.0 through 3.8.11; 3.9.0 through 3.9.6; 3.10.0 through 3.10.3; 3.11 through 3.11.0 |
| CVE-2022-46257 | 4.3 | Mar 7 | Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names Affected: 3.3.0 before 3.3.17; 3.4.0 before 3.4.12; 3.5.0 before 3.5.9; 3.6.0 before 3.6.5 |
| CVE-2021-22868 | 4.3 | Sep 24 | Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server Affected: before 2.22.22; 3.0.0 before 3.0.16; 3.1.0 before 3.1.8 |
| CVE-2023-6803 | 4.0 | Dec 21 | Race Condition allows Unauthorized Outside Collaborator Affected: 3.8 through 3.8.11; 3.9 through 3.9.6; 3.10 through 3.10.3; 3.11 through 3.11.0 |