Sploitus

22 exploited vulnerabilities in Puppet

Vulnerabilities with publicly known exploits

Vendors
Puppet, Suse, Ruby, Dp-Golang, Debian, Canonical
With known exploits
22
Affected Puppet versions
= 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2013-4761
CVSS 9.0 HIGH 2013-08-20FIX AVAILABLE
CVE-2013-3567
CVSS 9.0 HIGH 2013-06-26FIX AVAILABLE
CVE-2013-1655
CVSS 9.0 HIGH 2013-03-20FIX AVAILABLE
CVE-2024-27294
CVSS 7.8 HIGH 2024-02-29FIX AVAILABLE
CVE-2011-3872
CVSS 6.9 MEDIUM 2011-10-27FIX AVAILABLE
CVE-2011-3871
CVSS 6.9 MEDIUM 2011-10-27FIX AVAILABLE
CVE-2011-3870
CVSS 6.9 MEDIUM 2011-10-27FIX AVAILABLE
CVE-2011-3869
CVSS 6.9 MEDIUM 2011-10-27FIX AVAILABLE
CVE-2010-0156
CVSS 6.9 MEDIUM 2010-03-03FIX AVAILABLE
CVE-2009-3564
CVSS 6.9 MEDIUM 2009-10-06FIX AVAILABLE
CVE-2020-7942
CVSS 6.8 MEDIUM 2020-02-18FIX AVAILABLE
CVE-2014-3248
CVSS 6.2 MEDIUM 2014-11-16FIX AVAILABLE
CVE-2012-1989
CVSS 6.0 MEDIUM 2012-06-27FIX AVAILABLE
CVE-2012-1988
CVSS 6.0 MEDIUM 2012-05-29FIX AVAILABLE
CVE-2012-1987
CVSS 6.0 MEDIUM 2012-05-29FIX AVAILABLE
CVE-2012-1906
CVSS 6.0 MEDIUM 2012-05-29FIX AVAILABLE
CVE-2011-0528
CVSS 5.5 MEDIUM 2014-02-17FIX AVAILABLE
CVE-2012-3867
CVSS 4.3 MEDIUM 2012-08-06FIX AVAILABLE
CVE-2012-3864
CVSS 4.0 MEDIUM 2012-08-06FIX AVAILABLE
CVE-2012-3865
CVSS 3.5 LOW 2012-08-06FIX AVAILABLE
CVE-2012-3408
CVSS 2.6 LOW 2012-08-06FIX AVAILABLE
CVE-2012-3866
CVSS 2.1 LOW 2012-08-06FIX AVAILABLE