enterprise vulnerabilities and fixes

Recent CVEs affecting enterprise, with upgrade or downgrade steps. 29 tracked.

enterprise has 29 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 27. Most recent: 2024-01-09. Highest priority: CVE-2019-7276 (score 69/100).

• CVE-2023-49238 CRITICAL 9.8 UPGRADE In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in cer
• CVE-2022-41575 HIGH 7.5 UPGRADE A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3
• CVE-2022-41574 HIGH 7.5 UPGRADE An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to preven
• CVE-2022-27919 CRITICAL 9.8 UPGRADE Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an in
• CVE-2022-27225 MEDIUM 6.5 UPGRADE Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations
• CVE-2022-25364 HIGH 8.1 UPGRADE In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write a
• CVE-2021-41619 HIGH 7.2 UPGRADE An issue was discovered in Gradle Enterprise before 2021.1.2
• CVE-2021-41590 MEDIUM 5.3 UPGRADE In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP conf
• CVE-2021-41589 CRITICAL 9.8 UPGRADE UPGRADE In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poi
• CVE-2020-15776 HIGH 8.8 UPGRADE An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4
• CVE-2020-15775 HIGH 7.5 UPGRADE An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4
• CVE-2020-15774 MEDIUM 6.8 UPGRADE An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4
• CVE-2020-15773 MEDIUM 6.5 UPGRADE An issue was discovered in Gradle Enterprise before 2020.2.4
• CVE-2020-15772 MEDIUM 4.9 UPGRADE An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4
• CVE-2020-15771 HIGH 7.5 DOWNGRADE DOWNGRADE An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1
• CVE-2020-15770 MEDIUM 5.5 DOWNGRADE An issue was discovered in Gradle Enterprise 2018.5
• CVE-2020-15769 MEDIUM 6.1 UPGRADE An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4
• CVE-2020-15768 HIGH 7.5 UPGRADE UPGRADE An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.
• CVE-2020-15767 MEDIUM 5.3 UPGRADE An issue was discovered in Gradle Enterprise before 2020.2.5
• CVE-2019-7279 HIGH 7.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices have Hard-coded Credentials.
• CVE-2019-7278 MEDIUM 6.5 UPGRADE UPGRADE Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
• CVE-2019-7277 MEDIUM 5.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
• CVE-2019-7276 CRITICAL 9.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
• CVE-2019-7275 MEDIUM 6.1 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Open Redirect.
• CVE-2019-7274 CRITICAL 9.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
• CVE-2019-7273 HIGH 8.8 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
• CVE-2019-7272 MEDIUM 5.3 UPGRADE UPGRADE Optergy Proton/Enterprise devices allow Username Disclosure.
• CVE-2019-11403 CRITICAL 9.8 UPGRADE UPGRADE In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewin
• CVE-2019-11402 CRITICAL 9.8 UPGRADE In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted

FAQ

How do I fix enterprise vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise being exploited right now?

None of the tracked enterprise CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise CVE should I patch first?

CVE-2019-7276 currently ranks highest (69/100): Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console..

RSS feed for enterprise · ← Back to latest CVEs