2016.4.14

DATE	CVE	VULNERABILITY TITLE	RISK
2018-05-08	CVE-2018-6510	Cross-site Scripting vulnerability in Puppet Enterprise A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. network low complexity puppet CWE-79	5.4
2018-02-09	CVE-2017-10690	Improper Privilege Management vulnerability in multiple products In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. network low complexity puppet redhat CWE-269	6.5