Consul Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:hashicorp:consul_enterprise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3) |
|---|---|
| Product | Consul Enterprise (b5bbeab6-a3db-58d3-b338-8ec031b5bbae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2808 |
vulnerable | 2026-06-08 07:55:17.559967 |
Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider
MEDIUM (6.8)
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5.
Published: 2026-03-11T23:08:32.414Z
Updated: 2026-04-17T17:57:55.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11375 |
vulnerable | 2026-06-08 07:02:28.675517 |
Consul's event endpoint is vulnerable to denial of service
MEDIUM (6.5)
Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Published: 2025-10-28T20:12:14.325Z
Updated: 2025-12-09T01:37:57.188Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11374 |
vulnerable | 2026-06-08 07:02:28.673568 |
Consul's KV endpoint is vulnerable to denial of service
MEDIUM (6.5)
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
Published: 2025-10-28T20:19:05.292Z
Updated: 2026-04-17T18:34:14.829Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10086 |
vulnerable | 2026-06-08 06:22:03.544575 |
Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
MEDIUM (6.1)
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
Published: 2024-10-30T21:21:46.559Z
Updated: 2025-01-10T13:06:42.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10006 |
vulnerable | 2026-06-08 06:22:03.346822 |
Consul L7 Intentions Vulnerable To Headers Bypass
HIGH (8.3)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
Published: 2024-10-30T21:20:37.011Z
Updated: 2025-01-10T13:06:41.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10005 |
vulnerable | 2026-06-08 06:22:03.344013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3518 |
vulnerable | 2026-06-08 06:09:39.761182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2816 |
vulnerable | 2026-06-08 06:02:43.130428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1297 |
vulnerable | 2026-06-08 05:52:34.351534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0845 |
vulnerable | 2026-06-08 05:52:32.938841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3920 |
vulnerable | 2026-06-08 05:48:22.628667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.