Owasp Dependency-check (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 83 known versions, newest CVE from 2024-03-06. Vendor: Jenkins.

CVEs of Owasp Dependency-check

• CVE-2024-28153 - CVSS 7.3 (high), 2024-03-06: Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site…
• CVE-2021-43577 - CVSS 7.1 (high), 2021-11-12: Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2017-1000109 - CVSS 6.1 (medium), 2017-10-05: The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting…