CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Mend•added 2019/08/07 2:20 p.m.•4 views

CVE-2019-10368

A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpldoTestConnection and JCloudsCloud.DescriptorImpldoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified...

8.8CVSS0.008EPSS

SaveExploits0References6

Mend•added 2019/08/07 2:20 p.m.•7 views

CVE-2019-10369

A missing permission check in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpldoTestConnection and JCloudsCloud.DescriptorImpldoTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained...

7.1CVSS0.00974EPSS

SaveExploits0References9

Rapid7 Vulnerability Database (full)•added 2019/08/07 12:00 a.m.•7 views

CVE-2019-10368: Cross-Site Request Forgery (CSRF)

8.8CVSS5.7AI score0.008EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by