G
Vendor security profile
gradle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit3
Patch rate%67
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
6toplam CVE
High3 (50%)
Medium2 (33%)
Low1 (17%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%50
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
3.2
CVE-2023-44387
Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations
G
Patch verifiedEPSS %0
6.9
CVE-2023-35946
Dependency cache path traversal in Gradle
G
Patch verifiedEPSS %0
7.5
CVE-2021-32751
Arbitrary code execution via specially crafted environment variables
G
Patch status unknownEPSS %3
8.8
CVE-2021-29428
Local privilege escalation through system temporary directory
G
Patch verifiedEPSS %1
4.0
CVE-2021-29429
Information disclosure through temporary directory permissions
G
Patch status unknownEPSS %0
7.5
CVE-2020-11979
Vulnerability in N/a Apache Ant
N
Patch verifiedEPSS %8