Approved changes feed: RSS · Atom
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*
part: a version: * update: *
| Vendor | Hashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3) |
|---|---|
| Product | Consul (5323a3d1-770c-5792-8baa-0ccc723628c6) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/consul |
purl2cpe | 2026-06-01 10:14:57.351850 |
pkg:deb/ubuntu/consul |
purl2cpe | 2026-06-01 10:14:57.351852 |
pkg:github/hashicorp/consul |
purl2cpe | 2026-06-01 10:14:57.351853 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11375 |
vulnerable | 2026-06-08 07:02:28.675545 |
Consul's event endpoint is vulnerable to denial of service
MEDIUM (6.5)
Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Published: 2025-10-28T20:12:14.325Z
Updated: 2025-12-09T01:37:57.188Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11374 |
vulnerable | 2026-06-08 07:02:28.674329 |
Consul's KV endpoint is vulnerable to denial of service
MEDIUM (6.5)
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Published: 2025-10-28T20:19:05.292Z
Updated: 2026-04-17T18:34:14.829Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10086 |
vulnerable | 2026-06-08 06:22:03.544726 |
Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
MEDIUM (6.1)
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
Published: 2024-10-30T21:21:46.559Z
Updated: 2025-01-10T13:06:42.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10006 |
vulnerable | 2026-06-08 06:22:03.346934 |
Consul L7 Intentions Vulnerable To Headers Bypass
HIGH (8.3)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
Published: 2024-10-30T21:20:37.011Z
Updated: 2025-01-10T13:06:41.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10005 |
vulnerable | 2026-06-08 06:22:03.344569 |
Consul L7 Intentions Vulnerable To URL Path Bypass
HIGH (8.1)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.
Published: 2024-10-30T21:19:22.576Z
Updated: 2025-01-10T13:06:39.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2816 |
vulnerable | 2026-06-08 06:02:43.131641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1297 |
vulnerable | 2026-06-08 05:52:34.352831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40716 |
vulnerable | 2026-06-08 05:48:28.011654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3920 |
vulnerable | 2026-06-08 05:48:22.630058 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29153 |
vulnerable | 2026-06-08 05:42:47.013559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24687 |
vulnerable | 2026-06-08 05:41:01.378274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41805 |
vulnerable | 2026-06-08 05:35:21.065521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41803 |
vulnerable | 2026-06-08 05:35:21.062086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3121 |
vulnerable | 2026-06-08 05:33:50.802609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38698 |
vulnerable | 2026-06-08 05:33:48.322931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37219 |
vulnerable | 2026-06-08 05:32:53.960733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36213 |
vulnerable | 2026-06-08 05:32:50.105946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32574 |
vulnerable | 2026-06-08 05:32:07.463306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28156 |
vulnerable | 2026-06-08 05:31:23.027210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7955 |
vulnerable | 2026-06-08 05:27:14.560846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7219 |
vulnerable | 2026-06-08 05:27:12.623624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28053 |
vulnerable | 2026-06-08 05:23:53.744385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25864 |
vulnerable | 2026-06-08 05:23:49.596688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25201 |
vulnerable | 2026-06-08 05:22:36.429761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13250 |
vulnerable | 2026-06-08 05:18:00.405604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13170 |
vulnerable | 2026-06-08 05:18:00.321725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12797 |
vulnerable | 2026-06-08 05:17:59.313174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12758 |
vulnerable | 2026-06-08 05:17:59.032470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8336 |
vulnerable | 2026-06-08 05:14:23.858689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.