Puppet Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Puppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816) |
|---|---|
| Product | Puppet Enterprise (f0f1d1ad-3d9e-59c3-8dee-09d0423ff49c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/puppetlabs/puppet |
purl2cpe | 2026-06-01 10:14:37.329908 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5459 |
vulnerable | 2026-06-08 07:37:24.832242 |
OS Command Injection
A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.
Published: 2025-06-26T06:30:56.546Z
Updated: 2025-07-03T09:25:04.719Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5309 |
vulnerable | 2026-06-08 06:19:43.137718 |
Broken Session Management in Puppet Enterprise
MEDIUM (6.8)
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
Published: 2023-11-07T19:01:05.041Z
Updated: 2024-09-04T19:03:16.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5255 |
vulnerable | 2026-06-08 06:19:43.037355 |
Denial of Service for Revocation of Auto Renewed Certificates
MEDIUM (4.4)
For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.
Published: 2023-10-03T17:54:55.177Z
Updated: 2024-09-19T19:29:30.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2530 |
vulnerable | 2026-06-08 06:02:42.479404 |
Details available
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-08-26T14:17:55.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1894 |
vulnerable | 2026-06-08 05:52:37.179704 |
Details available
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
Published: 2023-05-04T22:13:02.556Z
Updated: 2025-01-29T17:55:40.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27026 |
vulnerable | 2026-06-08 05:30:45.759785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27025 |
vulnerable | 2026-06-08 05:30:45.757246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27023 |
vulnerable | 2026-06-08 05:30:45.752590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27022 |
vulnerable | 2026-06-08 05:30:45.750266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27021 |
vulnerable | 2026-06-08 05:30:45.748344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27020 |
vulnerable | 2026-06-08 05:30:45.745683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27019 |
vulnerable | 2026-06-08 05:30:45.743343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7943 |
vulnerable | 2026-06-08 05:27:14.539211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10694 |
vulnerable | 2026-06-08 05:12:24.914947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6513 |
vulnerable | 2026-06-08 05:11:53.903143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6512 |
vulnerable | 2026-06-08 05:11:53.900216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6511 |
vulnerable | 2026-06-08 05:11:53.896013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6510 |
vulnerable | 2026-06-08 05:11:53.895695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6508 |
vulnerable | 2026-06-08 05:11:53.892158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11749 |
vulnerable | 2026-06-08 05:10:38.891126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7529 |
vulnerable | 2026-06-08 05:09:56.447660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2297 |
vulnerable | 2026-06-08 05:09:24.109010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2296 |
vulnerable | 2026-06-08 05:09:24.107376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2294 |
vulnerable | 2026-06-08 05:09:24.103631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2293 |
vulnerable | 2026-06-08 05:09:24.100759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10690 |
vulnerable | 2026-06-08 05:08:36.228701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10689 |
vulnerable | 2026-06-08 05:08:36.225819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9686 |
vulnerable | 2026-06-08 05:08:24.191679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5716 |
vulnerable | 2026-06-08 05:07:57.567194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5715 |
vulnerable | 2026-06-08 05:07:57.566795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2788 |
vulnerable | 2026-06-08 05:07:42.985586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8470 |
vulnerable | 2026-06-08 05:07:04.067946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6502 |
vulnerable | 2026-06-08 05:06:52.583376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6501 |
vulnerable | 2026-06-08 05:06:52.583062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5686 |
vulnerable | 2026-06-08 05:06:50.735746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4100 |
vulnerable | 2026-06-08 05:06:39.174012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1855 |
vulnerable | 2026-06-08 05:06:26.459591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1029 |
not_vulnerable | 2026-06-08 05:06:24.852509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9355 |
vulnerable | 2026-06-08 05:06:11.444670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3251 |
vulnerable | 2026-06-08 05:05:31.957773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3248 |
vulnerable | 2026-06-08 05:05:31.949900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4971 |
vulnerable | 2026-06-08 05:04:50.367265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4969 |
vulnerable | 2026-06-08 05:04:50.366749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4968 |
vulnerable | 2026-06-08 05:04:50.364593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4967 |
vulnerable | 2026-06-08 05:04:50.364055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4966 |
vulnerable | 2026-06-08 05:04:50.360743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4965 |
vulnerable | 2026-06-08 05:04:50.360432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4964 |
vulnerable | 2026-06-08 05:04:50.360038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4963 |
vulnerable | 2026-06-08 05:04:50.351184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4962 |
vulnerable | 2026-06-08 05:04:50.350766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4961 |
vulnerable | 2026-06-08 05:04:50.350388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4959 |
vulnerable | 2026-06-08 05:04:50.349997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4958 |
vulnerable | 2026-06-08 05:04:50.349600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4957 |
vulnerable | 2026-06-08 05:04:50.349181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4955 |
vulnerable | 2026-06-08 05:04:50.338232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4762 |
vulnerable | 2026-06-08 05:04:49.592885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3567 |
vulnerable | 2026-06-08 05:04:32.055306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2716 |
vulnerable | 2026-06-08 05:04:27.463433 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1640 |
vulnerable | 2026-06-08 05:03:55.289995 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1399 |
vulnerable | 2026-06-08 05:03:53.753112 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1398 |
vulnerable | 2026-06-08 05:03:53.749294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5158 |
vulnerable | 2026-06-08 05:02:54.857396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3867 |
vulnerable | 2026-06-08 05:02:14.082148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3866 |
vulnerable | 2026-06-08 05:02:14.068438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3865 |
vulnerable | 2026-06-08 05:02:14.067718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3864 |
vulnerable | 2026-06-08 05:02:14.066554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3408 |
vulnerable | 2026-06-08 05:02:09.641807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1988 |
vulnerable | 2026-06-08 05:00:52.193958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1987 |
vulnerable | 2026-06-08 05:00:52.193207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.