CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Mend•added 2019/05/31 2:20 p.m.•4 views

CVE-2019-10322

A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpldoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing...

5.3CVSS0.01792EPSS

SaveExploits1References7

Mend•added 2019/05/31 2:20 p.m.•4 views

CVE-2019-10321

A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpldoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method,...

5.3CVSS0.00883EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2019/05/31 12:00 a.m.•7 views

CVE-2019-10321: Cross-Site Request Forgery (CSRF)

4.3CVSS5.7AI score0.00883EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/05/31 12:00 a.m.•8 views

CVE-2019-10322: Missing Authorization

4.3CVSS5.7AI score0.01792EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by