Puppet
- Total products in the ecosystem
- 23
- Total vulnerabilities (90 days)
- 0
en
Verify to analyze this security profile
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-5459OS Command Injection | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published06/26/2025 | SeverityHigh |
CVE-2024-9160Security Misconfiguration in Forge module PEADM | Exploitation statusNot known exploited | FixYes | Affected productPEADM Forge Module | Published09/27/2024 | SeverityMedium |
CVE-2023-5309Broken Session Management in Puppet Enterprise | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published11/07/2023 | SeverityMedium |
CVE-2023-5214CVE-2023-5214 - Privilege Escalation in Puppet Bolt | Exploitation statusNot known exploited | FixYes | Affected productBolt | Published10/06/2023 | SeverityMedium |
CVE-2023-5255Denial of Service for Revocation of Auto Renewed Certificates | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published10/03/2023 | SeverityMedium |
CVE-2023-2530 | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published06/07/2023 | SeverityUnknown |
CVE-2023-1894 | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published05/04/2023 | SeverityMedium |
CVE-2022-3275Puppetlabs-apt Command Injection | Exploitation statusNot confirmed | FixYes | Affected productpuppetlabs-apt | Published10/07/2022 | SeverityHigh |
CVE-2022-3276Puppetlabs-mysql Command Injection | Exploitation statusNot confirmed | FixYes | Affected productpuppetlabs-mysql | Published10/07/2022 | SeverityHigh |
CVE-2022-2394Sensitive Parameter Exposure in Puppet Bolt prior to 3.24 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBolt | Published07/19/2022 | SeverityMedium |
CVE-2022-0675Puppet Firewall Module May Leave Unmanaged Rules | Exploitation statusNot confirmed | FixYes | Affected productFirewall Module | Published03/02/2022 | SeverityMedium |
CVE-2021-27023 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise, Puppet Server, Puppet Agent | Published11/18/2021 | SeverityUnknown |
CVE-2021-27025 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise, Puppet Agent | Published11/18/2021 | SeverityUnknown |
CVE-2021-27026 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise, Puppet Connect | Published11/18/2021 | SeverityUnknown |
CVE-2021-27024 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Continuous Delivery for Puppet Enterprise (CD4PE) | Published11/18/2021 | SeverityUnknown |
CVE-2021-27022 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published09/07/2021 | SeverityUnknown |
CVE-2021-27018 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Remediate | Published08/30/2021 | SeverityUnknown |
CVE-2021-27019 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppetDB, Puppet Enterprise | Published08/30/2021 | SeverityUnknown |
CVE-2021-27020 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published08/30/2021 | SeverityUnknown |
CVE-2021-27021 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet DB | Published07/20/2021 | SeverityUnknown |
CVE-2020-7945 | Exploitation statusNot confirmed | FixYes | Affected productContinuous Delivery for Puppet Enterprise (CD4PE) | Published09/18/2020 | SeverityUnknown |
CVE-2020-7944 | Exploitation statusNot confirmed | FixNot confirmed | Affected productContinuous Delivery for Puppet Enterprise (CD4PE) | Published03/26/2020 | SeverityUnknown |
CVE-2020-7943 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise 2018.1.x stream | Published03/11/2020 | SeverityUnknown |
CVE-2015-5686 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/27/2020 | SeverityUnknown |
CVE-2020-7942 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet | Published02/19/2020 | SeverityUnknown |
CVE-2018-11751 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Agent, Puppet | Published12/16/2019 | SeverityUnknown |
CVE-2014-0175 | Exploitation statusNot confirmed | FixNot confirmed | Affected productmcollective | Published12/13/2019 | SeverityUnknown |
CVE-2019-10695 | Exploitation statusNot confirmed | FixYes | Affected productContinuous Delivery for Puppet Enterprise (CD4PE) | Published12/11/2019 | SeverityUnknown |
CVE-2019-10694 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published12/11/2019 | SeverityUnknown |
CVE-2013-4968 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/11/2019 | SeverityUnknown |
CVE-2015-1855 | Exploitation statusNot confirmed | FixNot confirmed | Affected productRuby | Published11/29/2019 | SeverityUnknown |
CVE-2018-11747 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Discovery | Published03/17/2019 | SeverityUnknown |
CVE-2018-6517 | Exploitation statusNot confirmed | FixNot confirmed | Affected productChloride | Published03/17/2019 | SeverityUnknown |
CVE-2018-11748 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published10/02/2018 | SeverityUnknown |
CVE-2018-11752 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published10/02/2018 | SeverityUnknown |
CVE-2018-11750 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/02/2018 | SeverityUnknown |
CVE-2018-11749 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published08/24/2018 | SeverityUnknown |
CVE-2018-11746Puppet Discovery can leak authentication information | Exploitation statusNot confirmed | FixYes | Affected productPuppet Discovery | Published07/03/2018 | SeverityHigh |
CVE-2018-6516 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpe-client-tools | Published06/14/2018 | SeverityUnknown |
CVE-2018-6515 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Agent | Published06/11/2018 | SeverityUnknown |
CVE-2018-6512 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0 | Published06/11/2018 | SeverityUnknown |
CVE-2018-6513 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise and Puppet Agent | Published06/11/2018 | SeverityUnknown |
CVE-2018-6514 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Agent | Published06/11/2018 | SeverityUnknown |
CVE-2018-6510XSS Vulnerability in Puppet Enterprise Console | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published05/08/2018 | SeverityMedium |
CVE-2018-6511XSS Vulnerability in Puppet Enterprise Console | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published05/08/2018 | SeverityMedium |
CVE-2017-10689 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published02/09/2018 | SeverityUnknown |
CVE-2017-10690 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published02/09/2018 | SeverityUnknown |
CVE-2018-6508 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published02/09/2018 | SeverityUnknown |
CVE-2017-2297 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published02/01/2018 | SeverityUnknown |
CVE-2017-2293 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published02/01/2018 | SeverityUnknown |
CVE-2017-2296 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published02/01/2018 | SeverityUnknown |
CVE-2015-7224 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/21/2017 | SeverityUnknown |
CVE-2015-4100 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/21/2017 | SeverityUnknown |
CVE-2014-3250 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/11/2017 | SeverityUnknown |
CVE-2015-6502 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/11/2017 | SeverityUnknown |
CVE-2015-8470 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/11/2017 | SeverityUnknown |
CVE-2016-5713 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Agent | Published12/06/2017 | SeverityUnknown |
CVE-2016-5714 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/18/2017 | SeverityUnknown |
CVE-2017-2299 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpuppetlabs-apache | Published09/15/2017 | SeverityUnknown |
CVE-2016-5716 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published08/09/2017 | SeverityUnknown |
CVE-2017-7529 | Exploitation statusNot confirmed | FixNot confirmed | Affected productnginx | Published07/13/2017 | SeverityUnknown |
CVE-2017-2294 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet Enterprise | Published07/05/2017 | SeverityUnknown |
CVE-2017-2295 | Exploitation statusNot confirmed | FixNot confirmed | Affected productPuppet server | Published07/05/2017 | SeverityUnknown |
CVE-2017-2292 | Exploitation statusNot confirmed | FixNot confirmed | Affected productmcollective, Puppet, Puppet Enterprise | Published06/30/2017 | SeverityUnknown |
CVE-2017-2298 | Exploitation statusNot confirmed | FixNot confirmed | Affected productmcollective | Published06/30/2017 | SeverityUnknown |
CVE-2017-2290 | Exploitation statusNot confirmed | FixYes | Affected productmcollective-puppet-agent plugin | Published03/03/2017 | SeverityUnknown |
CVE-2016-2787 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/13/2017 | SeverityUnknown |
CVE-2016-2788 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/13/2017 | SeverityUnknown |
CVE-2016-9686 | Exploitation statusNot confirmed | FixYes | Affected productPuppet Enterprise | Published02/08/2017 | SeverityUnknown |
CVE-2016-5715 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/12/2017 | SeverityUnknown |
CVE-2015-6501 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/12/2017 | SeverityUnknown |
CVE-2016-2785 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/10/2016 | SeverityUnknown |
CVE-2016-2786 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/10/2016 | SeverityUnknown |
CVE-2015-7330 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/11/2016 | SeverityUnknown |
CVE-2015-7328 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/08/2016 | SeverityUnknown |
CVE-2015-1426 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/23/2015 | SeverityUnknown |
CVE-2014-9355 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/19/2014 | SeverityUnknown |
CVE-2014-7170 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2014 | SeverityUnknown |
CVE-2014-3248 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/16/2014 | SeverityUnknown |
CVE-2014-3251 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/12/2014 | SeverityUnknown |
CVE-2014-3249 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/17/2014 | SeverityUnknown |
CVE-2012-0891 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2014 | SeverityUnknown |
CVE-2013-1399 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2014 | SeverityUnknown |
CVE-2012-5158 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2014 | SeverityUnknown |
CVE-2013-4963 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2014 | SeverityUnknown |
CVE-2013-1398 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2014 | SeverityUnknown |
CVE-2013-4971 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/07/2014 | SeverityUnknown |
CVE-2013-4966 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/07/2014 | SeverityUnknown |
CVE-2011-0528 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/17/2014 | SeverityUnknown |
CVE-2013-4969 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/07/2014 | SeverityUnknown |
CVE-2013-4957 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/25/2013 | SeverityUnknown |
CVE-2013-4965 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/25/2013 | SeverityUnknown |
CVE-2013-4958 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4962 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4967 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4955 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4964 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4956 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4959 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CVE-2013-4762 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/20/2013 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan