Skip to content
Noroxi

gradle records

50 published records for vendor gradle.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
34%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

50 records
  • CVE-2016-6199
    40Plan

    ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

    CriticalCVSS 9.8No exploitEPSS 4%

    gradle · gradleFeb 7, 2017

  • CVE-2019-15052
    40Plan

    The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host.

    CriticalCVSS 9.8No exploitEPSS 2%

    gradle · gradleAug 14, 2019

  • CVE-2021-41589
    40Plan

    In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code executi

    CriticalCVSS 9.8No exploitEPSS 2%

    gradle · build cache nodeOct 27, 2021

  • CVE-2022-27919
    40Plan

    Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file.

    CriticalCVSS 9.8No exploitEPSS 1%

    gradle · enterpriseMar 25, 2022

  • CVE-2019-11402
    39Monitor

    In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.

    CriticalCVSS 9.8No exploitEPSS 1%

    gradle · enterpriseApr 22, 2019

  • CVE-2019-11403
    39Monitor

    In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the

    CriticalCVSS 9.8No exploitEPSS 1%

    gradle · build cache nodeApr 22, 2019

  • CVE-2023-26053
    39Monitor

    Gradle usage of long IDs for PGP keys opens potential for collision attacks

    CriticalCVSS 9.8No exploitEPSS 0%

    gradle · gradleMar 2, 2023

  • CVE-2023-49238
    39Monitor

    In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) b

    CriticalCVSS 9.8No exploitEPSS 0%

    gradle · enterpriseJan 8, 2024

  • CVE-2020-15776
    36Monitor

    An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4.

    HighCVSS 8.8No exploitEPSS 2%

    gradle · enterpriseSep 18, 2020

  • CVE-2026-22816
    34Monitor

    Gradle fails to disable repositories which can expose builds to malicious artifacts

    HighCVSS 8.6No exploitEPSS 0%

    gradle · gradleJan 16, 2026

  • CVE-2026-22865
    34Monitor

    Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

    HighCVSS 8.6No exploitEPSS 0%

    gradle · gradleJan 16, 2026

  • CVE-2026-25063
    33Monitor

    gradle-completion has a Bash command injection issue

    HighCVSS 8.3No exploitEPSS 0%

    gradle · gradle-completionJan 29, 2026

  • CVE-2020-11979
    32Monitor

    As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was al

    HighCVSS 7.5No exploitEPSS 7%

    apache · antOct 1, 2020

  • CVE-2022-25364
    32Monitor

    In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access.

    HighCVSS 8.1No exploitEPSS 1%

    gradle · enterpriseMar 17, 2022

  • CVE-2021-41588
    32Monitor

    In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects.

    HighCVSS 8.1No exploitEPSS 0%

    gradle · gradleSep 24, 2021

  • CVE-2023-35947
    32Monitor

    Path traversal vulnerabilities in handling of Tar archives in Gradle

    HighCVSS 8.1No exploitEPSS 0%

    gradle · gradleJun 30, 2023

  • CVE-2021-32751
    31Monitor

    Arbitrary code execution via specially crafted environment variables

    HighCVSS 7.5No exploitEPSS 2%

    gradle · gradleJul 20, 2021

  • CVE-2020-15768
    31Monitor

    An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2.

    HighCVSS 7.5No exploitEPSS 1%

    gradle · enterpriseSep 18, 2020

  • CVE-2020-15777
    31Monitor

    An issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise.

    HighCVSS 7.8No exploitEPSS 1%

    gradle · mavenAug 25, 2020

  • CVE-2021-29428
    31Monitor

    Local privilege escalation through system temporary directory

    HighCVSS 7.8No exploitEPSS 0%

    gradle · gradleApr 13, 2021

  • CVE-2022-23630
    30Monitor

    Dependency verification bypass in Gradle

    HighCVSS 7.5No exploitEPSS 1%

    gradle · gradleFeb 10, 2022

  • CVE-2021-41584
    30Monitor

    Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configura

    HighCVSS 7.5No exploitEPSS 1%

    gradle · gradleSep 23, 2021

  • CVE-2020-15775
    30Monitor

    An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4.

    HighCVSS 7.5No exploitEPSS 1%

    gradle · enterpriseSep 18, 2020

  • CVE-2020-15771
    30Monitor

    An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1.

    HighCVSS 7.5No exploitEPSS 1%

    gradle · enterpriseSep 18, 2020

  • CVE-2021-41587
    30Monitor

    In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other re

    HighCVSS 7.5No exploitEPSS 0%

    gradle · gradleSep 24, 2021