Enalean
Enalean Tuleap: vulnerabilidades y CVE
Enalean Tuleap tiene 71 vulnerabilidades publicadas, 8 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE71
Últimos 12 meses8
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-24007 | Media (4.6) | 0.16% | — | 2 feb 2026 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims… |
| CVE-2025-65962 | Media (4.3) | 0.16% | — | 9 dic 2025 | Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4… |
| CVE-2025-64760 | Media (4.3) | 0.14% | — | 8 dic 2025 | Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterprise Edition prior to 17.0-3 and 16.13-8… |
| CVE-2025-64499 | Media (5.4) | 0.14% | — | 8 dic 2025 | Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2,… |
| CVE-2025-64498 | Media (4.3) | 0.14% | — | 8 dic 2025 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and… |
| CVE-2025-64497 | Media (6.5) | 0.28% | — | 8 dic 2025 | Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10… |
| CVE-2025-64482 | Media (4.6) | 0.14% | — | 12 nov 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-,… |
| CVE-2025-64117 | Media (4.6) | 0.14% | — | 12 nov 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1761813675 and Tuleap Enterprise Edition prior to versions 16.13-5 and… |
| CVE-2025-59040 | Media (4.3) | 0.33% | — | 18 sept 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they… |
| CVE-2025-54877 | Media (5.3) | 0.29% | — | 29 ago 2025 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before… |
| CVE-2025-53902 | Media (4.3) | 0.32% | — | 29 jul 2025 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6… |
| CVE-2025-53541 | Media (5.4) | 0.23% | — | 29 jul 2025 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5… |
| CVE-2025-52899 | Media (5.3) | 0.30% | — | 29 jul 2025 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4… |
| CVE-2025-50179 | Media (4.3) | 0.17% | — | 25 jun 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version… |
| CVE-2025-48991 | Media (4.3) | 0.17% | — | 25 jun 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to version 16.8.99.1748845907 and Tuleap… |
| CVE-2025-30209 | Media (5.3) | 0.37% | — | 31 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This… |
| CVE-2025-30203 | Media (4.8) | 0.30% | — | 31 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the content of RSS feeds in the RSS widgets. A project administrator or… |
| CVE-2025-30155 | Media (4.3) | 0.33% | — | 31 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap… |
| CVE-2025-29929 | Media (4.3) | 0.20% | — | 31 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick… |
| CVE-2025-29766 | Media (4.3) | 0.20% | — | 31 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this… |
| CVE-2025-27402 | Media (4.6) | 0.17% | — | 4 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability… |
| CVE-2025-27401 | Media (4.6) | 0.33% | — | 4 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious… |
| CVE-2025-27156 | Media (5.4) | 0.27% | — | 4 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to… |
| CVE-2025-27150 | Media (6.5) | 0.38% | — | 4 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from the archive generated with tuleap collect-system-data. These… |
| CVE-2025-27099 | Media (4.8) | 0.30% | — | 3 mar 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names used in the semantic timeframe deletion message. A tracker… |
| CVE-2025-27094 | Media (5.4) | 0.36% | — | 3 mar 2025 | Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential… |
| CVE-2025-24029 | Media (5.3) | 0.35% | — | 3 feb 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts… |
| CVE-2025-22129 | Media (4.3) | 0.33% | — | 3 feb 2025 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has been addressed in… |
| CVE-2024-52599 | Media (5.4) | 0.32% | — | 9 dic 2024 | Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tuleap Enterprise Edition prior to versions 16.1-4 and 16.0-7,… |
| CVE-2024-47767 | Media (4.3) | 0.44% | — | 14 oct 2024 | Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, users might… |