Vulnerabilities > Enalean
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-03-12 | CVE-2018-7538 | SQL Injection vulnerability in Enalean Tuleap A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands. | 9.8 |
| 2018-03-01 | CVE-2018-7634 | Cross-Site Request Forgery (CSRF) vulnerability in Enalean Tuleap 9.17 An issue was discovered in Enalean Tuleap 9.17. | 8.8 |
| 2017-10-30 | CVE-2017-7411 | Code Injection vulnerability in Enalean Tuleap An issue was discovered in Enalean Tuleap 9.6 and prior versions. | 8.8 |
| 2017-04-29 | CVE-2017-7981 | OS Command Injection vulnerability in multiple products Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. | 8.8 |