Product by Puppet

    Puppet Enterprise

    91 known vulnerabilities in Puppet Enterprise (Puppet), 0 of them actively exploited (CISA KEV).

    Key figures

    91

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Puppet Enterprise (Puppet)
    HighCVE-2017-7529

    Nginx: Integer Overflow or Wraparound

    also in 3 other products

    		7.5
    HighCVE-2020-7943

    Puppet Enterprise 2018.1.x stream: Incorrect Default Permissions

    also in 2 other products

    		7.5
    HighCVE-2026-85979

    Command Injection in Puppet Enterprise

    		—
    CriticalCVE-2016-2788

    Puppet Enterprise: Code Execution

    also in 1 other product

    		9.8
    HighCVE-2025-5459

    OS Command Injection

    also in 2 other products

    		8.8
    CriticalCVE-2018-6512

    Puppet Pe-razor-server: Code Execution

    		9.8
    HighCVE-2015-7330

    Puppet Enterprise: security vulnerability

    		8.8
    CriticalCVE-2016-2786

    Puppet Agent: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2016-5716

    Puppet Enterprise: Remote Code Execution

    		8.8
    HighCVE-2016-5714

    Puppet Enterprise: Code Execution

    also in 1 other product

    		7.2
    CriticalCVE-2021-27023

    Puppet Agent: security vulnerability

    also in 3 other products

    		9.8
    HighCVE-2018-6508

    Puppet Enterprise: security vulnerability

    also in 1 other product

    		8.0
    MediumCVE-2015-1855

    Ruby: security vulnerability

    also in 4 other products

    		5.9
    CriticalCVE-2023-2530

    Puppet Enterprise: Privilege Escalation

    		9.8
    CriticalCVE-2019-10694

    Puppet Enterprise: security vulnerability

    		9.8
    HighCVE-2021-27021

    Puppet DB: OWASP Top Ten 2017 Category A1 - Injection

    also in 2 other products

    		8.8
    HighCVE-2018-6513

    Puppet Enterprise and Puppet Agent: Privilege Escalation

    also in 1 other product

    		8.8
    MediumCVE-2015-8470

    Puppet Enterprise: security vulnerability

    		6.5
    HighCVE-2021-27020

    Puppet Enterprise: security vulnerability

    		8.8
    HighCVE-2017-2294

    Puppet Enterprise: security vulnerability

    		7.5
    MediumCVE-2016-5715

    Puppet Enterprise: Open Redirect

    		6.1
    CriticalCVE-2018-11749

    Puppet Enterprise: security vulnerability

    		9.8
    Not ratedCVE-2013-1653

    Puppet: Code Execution

    also in 3 other products

    		—
    MediumCVE-2015-6501

    Puppet Enterprise: Open Redirect

    		6.1
    Not ratedCVE-2013-1640

    Puppet: Code Execution

    also in 2 other products

    		—

    All vulnerabilities in search

    All products by Puppet