Websphere Deployer (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2020-01-29. Vendor: Jenkins.

CVEs of Websphere Deployer

• CVE-2020-2108 - CVSS 7.6 (high), 2020-01-29: Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with…
• CVE-2019-16560 - CVSS 8.8 (high), 2019-12-17: A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine…
• CVE-2019-16559 - CVSS 5.4 (medium), 2019-12-17: A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests…
• CVE-2019-16561 - CVSS 7.1 (high), 2019-12-17: Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the…
• CVE-2019-1003056 - CVSS 8.8 (high), 2019-04-04: Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended…