Lucene search

K

Jenkins VRealize Orchestrator Plugin Security Vulnerabilities

cve
cve

CVE-2022-34212

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified...

5.7CVSS

5.3AI Score

0.001EPSS

2022-06-23 05:15 PM
74
4
cve
cve

CVE-2022-34211

A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified...

6.5CVSS

6.2AI Score

0.001EPSS

2022-06-23 05:15 PM
65
4