GE
Product
GitHub Enterprise Server
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 18Low 1
Watch
Add GitHub Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23740 | 8.8 | Nov 23 | Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution Affected: 3.7 before 3.7.1 |
| CVE-2022-23734 | 8.8 | Oct 19 | Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution Affected: 3.2 before 3.2.16; 3.3 before 3.3.11; 3.4 before 3.4.6; 3.5 before 3.5.3 |
| CVE-2025-3246 | 7.6 | Apr 17 | Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers Affected: 3.16 through 3.16.1 |
| CVE-2024-5746 | 7.2 | Jun 20 | A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution… Affected: 3.9.0 through 3.9.15; 3.10.0 through 3.10.12; 3.11.0 through 3.11.10; 3.12.0 through 3.12.4 |
| CVE-2024-2443 | 7.2 | Mar 20 | Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console Affected: 3.8.0 before 3.8.17; 3.9.0 before 3.9.12; 3.10.0 before 3.10.9; 3.11.0 before 3.11.7; 3.12.0 before 3.12.1 |
Showing 5