gradle (SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS package gradle, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2019-15052 — CVSS 9.8 (critical): The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a…
• CVE-2021-29428 — CVSS 8.8 (high): In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple…
• CVE-2023-35947 — CVSS 6.9 (medium): Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar…
• CVE-2021-29429 — CVSS 4.0 (medium): In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access…