How many GitHub Enterprise Server CVEs are in CISA KEV?

None of GitHub Enterprise Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for GitHub Enterprise Server vulnerabilities?

Yes — 1 of GitHub Enterprise Server's CVEs have a known public exploit.

Which versions of GitHub Enterprise Server are affected?

984 distinct GitHub Enterprise Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in GitHub Enterprise Server CVEs?

GitHub Enterprise Server's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).

How many critical GitHub Enterprise Server vulnerabilities are there?

GitHub Enterprise Server has 15 critical and 53 high-severity CVEs.

What is the average severity of GitHub Enterprise Server CVEs?

The average CVSS base score across GitHub Enterprise Server's scored CVEs is 7.2.

GitHub Enterprise Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

GitHub Enterprise Server has 124 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting GitHub Enterprise Server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include linux.

Severity and exploitation

How the CVSS severity of GitHub Enterprise Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical15

High53

Medium55

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of GitHub Enterprise Server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of GitHub Enterprise Server's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every GitHub Enterprise Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.10.0 <= v < 3.10.412 CVEs
3.8.0 <= v < 3.8.1212 CVEs
3.9.0 <= v < 3.9.712 CVEs
>= 3.10.710 CVEs
>= 3.11.510 CVEs
>= 3.8.1210 CVEs
>= 3.9.1010 CVEs
3.10.0 <= v < 3.10.710 CVEs
3.11.0 <= v < 3.11.510 CVEs
3.11.0 <= v <= 3.11.010 CVEs
< 3.8.159 CVEs
>= 3.10.4

Frequently asked questions

Common questions about GitHub Enterprise Server vulnerabilities.

How many CVEs does GitHub Enterprise Server have?: GitHub Enterprise Server has 124 published CVE records since 2021.
How many GitHub Enterprise Server CVEs are in CISA KEV?: None of GitHub Enterprise Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for GitHub Enterprise Server vulnerabilities?: Yes — 1 of GitHub Enterprise Server's CVEs have a known public exploit.
Which versions of GitHub Enterprise Server are affected?: 984 distinct GitHub Enterprise Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in GitHub Enterprise Server CVEs?: GitHub Enterprise Server's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).
How many critical GitHub Enterprise Server vulnerabilities are there?: GitHub Enterprise Server has 15 critical and 53 high-severity CVEs.
What is the average severity of GitHub Enterprise Server CVEs?: The average CVSS base score across GitHub Enterprise Server's scored CVEs is 7.2.

GitHub Enterprise Server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other GitHub products

Frequently asked questions

References

Track GitHub Enterprise Server vulnerabilities

Fixed in