CVE-2019-10464

2019-10-2313:15:10

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

CPENameOperatorVersion
weblogic-deployer-plugineqweblogic-deployer-plugin-2.8
weblogic-deployer-plugineqweblogic-deployer-plugin-2.10
weblogic-deployer-plugineqweblogic-deployer-plugin-3.1
weblogic-deployer-plugineqweblogic-deployer-plugin-2.4
weblogic-deployer-plugineqweblogic-deployer-plugin-3.3
weblogic-deployer-plugineqweblogic-deployer-plugin-2.0
weblogic-deployer-plugineqweblogic-deployer-plugin-3.0
weblogic-deployer-plugineqweblogic-deployer-plugin-2.9
weblogic-deployer-plugineqweblogic-deployer-plugin-2.6
weblogic-deployer-plugineqweblogic-deployer-plugin-4.1

Name	Operator	Version
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.8
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.10
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.1
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.4
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.3
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.0
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.0
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.9
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.6
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-4.1