Puppet vulnerabilities
37 published CVEs name Puppet among the affected products.
- 37Published CVEs37 of them scored
- 0Last 12 monthspublished in the last year
- 6Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-9160
Security Misconfiguration in Forge module PEADM
Puppet · PEADM Forge Module
Medium5.4 - CVE-2023-5309
Broken Session Management in Puppet Enterprise
Puppet · Puppet Enterprise
Medium6.8 - CVE-2023-5214
CVE-2023-5214 - Privilege Escalation in Puppet Bolt
Puppet · Bolt
Medium6.5 - CVE-2023-5255
Denial of Service for Revocation of Auto Renewed Certificates
Puppet · Puppet Enterprise
Medium4.4 - CVE-2023-2530
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Puppet · Puppet Enterprise
Critical9.8 - CVE-2023-1894
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted…
Puppet · Puppet Enterprise
Medium5.3 - CVE-2022-3276
Puppetlabs-mysql Command Injection
Puppet · puppetlabs-mysql
High8.4 - CVE-2022-3275
Puppetlabs-apt Command Injection
Puppet · puppetlabs-apt
High8.4 - CVE-2022-2394
Sensitive Parameter Exposure in Puppet Bolt prior to 3.24
Puppet · Bolt
Medium4.1 - CVE-2022-0675
Puppet Firewall Module May Leave Unmanaged Rules
Puppet · Firewall Module
Medium5.6