How many Puppet continuous delivery CVEs are in CISA KEV?

None of Puppet continuous delivery's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Puppet continuous delivery are affected?

7 distinct Puppet continuous delivery versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Puppet continuous delivery CVEs?

Puppet continuous delivery's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-522 (Insufficiently Protected Credentials), CWE-532 (Insertion of Sensitive Information into Log File).

What is the average severity of Puppet continuous delivery CVEs?

The average CVSS base score across Puppet continuous delivery's scored CVEs is 7.0.

Puppet continuous delivery Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Puppet continuous delivery vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Puppet continuous delivery has 4 published CVE records since 2019, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Severity and exploitation

How the CVSS severity of Puppet continuous delivery's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Puppet continuous delivery's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Puppet continuous delivery CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Puppet continuous delivery version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.2.11 CVE
< 3.4.01 CVE
< 4.10.01 CVE
4.0.01 CVE

Fixed in

1.2.11 CVE
3.4.01 CVE
4.10.01 CVE

Find a version

4 CVEs

Sort

High vulnerability · 2021-11-18
CVE-2021-27024
Patch
High · CVSS 8.1
EPSS 0.8% (57th pct)2021-11-18
Medium vulnerability · 2020-09-18
CVE-2020-7945CWE-522
Medium · CVSS 5.5
EPSS 0.3% (24th pct)2020-09-18
High vulnerability · 2020-03-26
CVE-2020-7944
Patch
CWE-200
High · CVSS 7.7
EPSS 0.9% (59th pct)2020-03-26
Medium vulnerability · 2019-12-11
CVE-2019-10695
Patch
CWE-532
Medium · CVSS 6.5
EPSS 0.9% (59th pct)2019-12-11

Common weakness types

The CWE weakness categories most often found in Puppet continuous delivery CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Puppet continuous delivery CVEs were published each year.

2019

2020

2021

Other Puppet products

Browse vulnerabilities for other products by Puppet.

Puppet Enterprise90 CVEs Puppet49 CVEs Puppet Agent12 CVEs Puppet Server8 CVEs puppet-agent6 CVEs puppet enterprise users5 CVEs puppetserver5 CVEs

Frequently asked questions

Common questions about Puppet continuous delivery vulnerabilities.

How many CVEs does Puppet continuous delivery have?: Puppet continuous delivery has 4 published CVE records since 2019.
How many Puppet continuous delivery CVEs are in CISA KEV?: None of Puppet continuous delivery's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Puppet continuous delivery vulnerabilities?: No Puppet continuous delivery CVEs currently have a tracked public exploit in this dataset.
Which versions of Puppet continuous delivery are affected?: 7 distinct Puppet continuous delivery versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Puppet continuous delivery CVEs?: Puppet continuous delivery's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-522 (Insufficiently Protected Credentials), CWE-532 (Insertion of Sensitive Information into Log File).
What is the average severity of Puppet continuous delivery CVEs?: The average CVSS base score across Puppet continuous delivery's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Puppet continuous delivery vulnerabilities

Get an alert for each new Puppet continuous delivery CVE, with AI-written analysis and remediation steps.

Create an account See pricing