Threat database

243 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.9%	CVE-2022-41226Jenkins Compuware Common Configuration Plugin · Vulnerability Critical9.8EPSS 0.9%2022-09-21CVE Database V5CVE-2022-41226 Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. EPSS 0.9%Vulnerability Jenkins project Germany France+6	CVE Database V5	2022-09-21
Medium	5.4	EPSS 0.7%	CVE-2022-41225Jenkins Anchore Container Image Scanner Plugin · Vulnerability Medium5.4EPSS 0.7%2022-09-21CVE Database V5CVE-2022-41225 Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine. EPSS 0.7%Vulnerability Jenkins project Germany France+6	CVE Database V5	2022-09-21
Medium	5.4	EPSS 1.1%	CVE-2022-41224Jenkins · Vulnerability Medium5.4EPSS 1.1%2022-09-21CVE Database V5CVE-2022-41224 Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control tooltips for this component. EPSS 1.1%Vulnerability Jenkins project Germany France+6	CVE Database V5	2022-09-21

Showing 241–243 of 243 results