Approved changes feed: RSS · Atom

cpe:2.3:a:puppet:puppet_enterprise:2023.0:*:*:*:*:*:*:*

part: a version: 2023.0 update: *

VendorPuppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816)
ProductPuppet Enterprise (f0f1d1ad-3d9e-59c3-8dee-09d0423ff49c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/puppetlabs/puppet purl2cpe 2026-06-01 10:14:37.330044

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2530 vulnerable 2026-06-03 14:51:43.330052 Details available
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-08-26T14:17:55.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1894 vulnerable 2026-06-03 14:48:56.654600 Details available
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
Published: 2023-05-04T22:13:02.556Z
Updated: 2025-01-29T17:55:40.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.