Read the docs

Puppet

Records130All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

Puppet records in CISA KEV

No Puppet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Puppet Enterprise 89 records HIGH Puppet 42 records MEDIUM Puppet Agent 8 records MEDIUM Puppet Server 7 records MEDIUM Continuous Delivery 4 records LOW Marionette Collective 3 records MEDIUM Puppetdb 3 records MEDIUM Puppetlabs-mysql 3 records MEDIUM

Records

3 records in Puppetlabs-mysql · all components

TI-2022-03025 CVE-2022-3275

Puppetlabs-apt Command Injection

Priority MEDIUM 47

Command injection is possible in the puppetlabs-apt module prior to version 9.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02368 Published 2022-10-07 Fixed in 9.0.0 CWE-78
TI-2022-03026 CVE-2022-3276 · GHSA-6wx8-c453-jp55

Puppetlabs-mysql Command Injection

Priority MEDIUM 41

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01686 Published 2022-10-07 Fixed in 13.0.0 CWE-78
Open these records in search →