CVSS 3 Base Score: Posted On: July 30, 2019Assessed Risk Level: MediumOn July 16th 2019, Oracle announced several security vulnerabilities in Java. Previous releases of Puppet Enterprise contain a vulnerable version of Java. Puppet Enterprise 2019.1.1, 2019.0.4, and 2018.1.9 contain an updated version of Java that has patched the vulnerabilities.For more information about these Java vulnerabilities, refer to the Oracle security announcement.Status:Affected software versions:Puppet Enterprise versions prior to 2019.1.1Puppet Enterprise versions prior to 2019.0.4Puppet Enterprise versions prior to 2018.1.9Resolved in:Puppet Enterprise 2019.1.1Puppet Enterprise 2019.0.4Puppet Enterprise 2018.1.9← Back to CVE Listings