Login Request a demo
EN
Product
Enterprise
by Gradle · last CVE Jan 26, 2025
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news1Timeline
Severity mix
Critical 5High 10Medium 8Low 0
Severity
All severities23Critical5High10Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15776
8.8
2%
Sep 18
An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4
Affected: 2018.2 through 2020.2.4
CVE-2025-24858
8.3
0%
Jan 26
Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access to a Develocity server to obtain the hashed password of the system user
Affected: 2020.4 before 2024.1.9; 2024.2 before 2024.2.7; 2024.3 before 2024.3.1
CVE-2022-25364
8.1
1%
Mar 17
In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access
Affected: before 2021.4.2
CVE-2022-41575
7.5
1%
Oct 21
A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data…
Affected: 2022.3 before 2022.3.3
CVE-2022-41574
7.5
1%
Oct 7
An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content…
Affected: 2020.4 before 2022.3.2
CVE-2020-15775
7.5
1%
Sep 18
An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4
Affected: 2017.1 through 2020.2.4
CVE-2020-15771
7.5
1%
Sep 18
An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1
Affected: 2018.2
CVE-2020-15768
7.5
2%
Sep 18
An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2
Affected: 2017.3 through 2020.2.4
CVE-2021-41619
7.2
3%
Oct 27
An issue was discovered in Gradle Enterprise before 2021.1.2
Affected: 2020.4 before 2021.1.2
CVE-2024-46881
7.1
0%
Jan 26
Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control
Affected: 2023.4 before 2024.1.8
Showing 10