GE
Product
GitHub Enterprise Server
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 18Low 1
Watch
Add GitHub Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6800 | 9.8 | Aug 20 | An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed… Affected: 3.13.0 through 3.13.2; 3.12.0 through 3.12.7; 3.11.0 through 3.11.13; 3.10.0 through 3.10.15 |
| CVE-2022-23739 | 9.8 | Jan 17 | Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens Affected: 3.3 before 3.3.16; 3.4 before 3.4.11; 3.5 before 3.5.8; 3.6 before 3.6.4; 3.7 before 3.7.1 |
Showing 2