CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Cvelist•added 2026/06/24 1:20 p.m.•43 views

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

0.00178EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 3:15 p.m.•20 views

CVE-2020-2120

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

8.8CVSS6.7AI score0.0115EPSS

SaveExploits0

NVD•added 2020/02/12 3:15 p.m.•23 views

CVE-2020-2120

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

8.8CVSS8.7AI score0.0115EPSS

SaveExploits0References2

Prion•added 2020/02/12 3:15 p.m.•20 views

Xxe

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

6.5CVSS8.7AI score0.0115EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/02/12 2:35 p.m.•36 views

CVE-2020-2120

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

8.8AI score0.0115EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by