Maven (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 35 known versions, newest CVE from 2019-12-17. Vendor: Jenkins.

CVEs of Maven

• CVE-2019-16550 - CVSS 8.8 (high), 2019-12-17: A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have…
• CVE-2019-16549 - CVSS 8.1 (high), 2019-12-17: Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle…
• CVE-2019-10358 - CVSS 6.5 (medium), 2019-07-31: Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the…
• CVE-2017-1000397 - CVSS 5.9 (medium), 2018-01-26: Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL…