Vrealize Orchestrator (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2022-06-23. Vendor: Jenkins.

CVEs of Vrealize Orchestrator

• CVE-2022-34212 - CVSS 5.7 (medium), 2022-06-23: A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request…
• CVE-2022-34211 - CVSS 6.5 (medium), 2022-06-23: A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an…