# Puppet Puppet Enterprise


- [CVE-2023-2530](https://insights.sbomify.com/CVE-2023-2530/): Privilege escalation in Puppet Enterprise (critical 9.8)
- [CVE-2021-27023](https://insights.sbomify.com/CVE-2021-27023/): Unsafe HTTP Redirect in Puppet Agent and Puppet Server (critical 9.8)
- [CVE-2019-10694](https://insights.sbomify.com/CVE-2019-10694/): Hardcoded credentials in Puppet Enterprise (critical 9.8)
- [CVE-2018-11749](https://insights.sbomify.com/CVE-2018-11749/): Information disclosure in Puppet Enterprise (critical 9.8)
- [CVE-2018-6512](https://insights.sbomify.com/CVE-2018-6512/): Code injection in Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0 (critical 9.8)
- [CVE-2016-2788](https://insights.sbomify.com/CVE-2016-2788/): Code injection in n/a (critical 9.8)
- [CVE-2016-2786](https://insights.sbomify.com/CVE-2016-2786/): Security feature bypass in n/a (critical 9.8)
- [CVE-2013-1640](https://insights.sbomify.com/CVE-2013-1640/): Code injection in n/a (critical 9.0)
- [CVE-2021-27020](https://insights.sbomify.com/CVE-2021-27020/): Other in Puppet Enterprise (high 8.8)
- [CVE-2021-27021](https://insights.sbomify.com/CVE-2021-27021/): SQL injection in Puppet DB (high 8.8)
- [CVE-2015-5686](https://insights.sbomify.com/CVE-2015-5686/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2018-6513](https://insights.sbomify.com/CVE-2018-6513/): Privilege escalation in Puppet Enterprise and Puppet Agent (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/puppet/puppet-enterprise/