Advisories · Technology
fleet.
Every CVE that names fleet among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression
- fleet
- CWE-409
- CVSS 8.7 High
Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing
- fleet
- Denial of service
- CVSS 5.3 Medium
Fleet before 4.89.0 Information Disclosure via MDM Command Results
- fleet
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Fleet before 4.87.0 Authentication Bypass via Device Identifiers
- fleet
- Authentication bypass
- CVSS 8.9 High
Fleet Homebrew Cask OS Command Injection via Metadata
- fleet
- Command injection
- CVSS 6.6 Medium
Fleet Vulnerable to Windows MDM cross-device command disclosure
- fleet
- CWE-488
- CVSS 5.7 Medium
Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts
- fleet
- Command injection
- CVSS 6.5 Medium
Improper Authorization in github.com/fleetdm/fleet
- fleet
- Broken access control
- CVSS 2.7 Low
Denial-of-service in Fleet
- fleet
- Denial of service
-
Fleet before 2.1.2 allows exposure of SMTP credentials.
- Fleet