Puppet vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 201812
3. 201811
4. 20201
5. 20224
6. 20235
7. 20241

Newest CVEs

• CVE-2024-9160

  Security Misconfiguration in Forge module PEADM

  Puppet · PEADM Forge Module

  Medium5.4
• CVE-2023-5309

  Broken Session Management in Puppet Enterprise

  Puppet · Puppet Enterprise

  Medium6.8
• CVE-2023-5214

  CVE-2023-5214 - Privilege Escalation in Puppet Bolt

  Puppet · Bolt

  Medium6.5
• CVE-2023-5255

  Denial of Service for Revocation of Auto Renewed Certificates

  Puppet · Puppet Enterprise

  Medium4.4
• CVE-2023-2530

  A privilege escalation allowing remote code execution was discovered in the orchestration service.

  Puppet · Puppet Enterprise

  Critical9.8
• CVE-2023-1894

  A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted…

  Puppet · Puppet Enterprise

  Medium5.3
• CVE-2022-3276

  Puppetlabs-mysql Command Injection

  Puppet · puppetlabs-mysql

  High8.4
• CVE-2022-3275

  Puppetlabs-apt Command Injection

  Puppet · puppetlabs-apt

  High8.4
• CVE-2022-2394

  Sensitive Parameter Exposure in Puppet Bolt prior to 3.24

  Puppet · Bolt

  Medium4.1
• CVE-2022-0675

  Puppet Firewall Module May Leave Unmanaged Rules

  Puppet · Firewall Module

  Medium5.6