Lucene search
+L

1703 matches found

NVD
NVD
added 2024/01/09 9:15 a.m.13 views

CVE-2023-6149

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

6.5CVSS5.9AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/09 9:15 a.m.6 views

CVE-2023-6149

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

6.5CVSS5.8AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/09 9:15 a.m.6 views

CVE-2023-6148

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

5.4CVSS5.8AI score0.00458EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/09 9:15 a.m.18 views

Cross site scripting

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

4.9CVSS6.3AI score0.00458EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2024/01/09 9:15 a.m.19 views

Design/Logic Flaw

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

4CVSS7AI score0.00457EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/09 8:21 a.m.8 views

CVE-2023-6149 Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

5.7CVSS7AI score0.00457EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/09 8:21 a.m.60 views

CVE-2023-6149

Qualys Jenkins Plugin for WAS (versions prior to and including 2.0.11) is affected by a privilege-check flaw during the connectivity check to Qualys Cloud Services. This lack of permission checking allows any user with login access to configure or edit jobs to route or modify requests to a rogue ...

6.5CVSS6.4AI score0.00457EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/09 8:21 a.m.21 views

CVE-2023-6149 Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

5.7CVSS6.6AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/09 8:15 a.m.9 views

CVE-2023-6147

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS5.8AI score0.00547EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/09 8:15 a.m.23 views

CVE-2023-6147

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS5.9AI score0.00547EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/09 8:15 a.m.17 views

Design/Logic Flaw

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

4CVSS7AI score0.00547EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/09 8:14 a.m.8 views

CVE-2023-6148 Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

5.7CVSS5.5AI score0.00458EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/09 8:14 a.m.26 views

CVE-2023-6148 Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

5.7CVSS6AI score0.00458EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/09 8:8 a.m.12 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.1AI score0.00547EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/09 8:8 a.m.31 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.8AI score0.00547EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.9 views

PT-2024-14890 · Qualys · Qualys Jenkins Plugin For Was

Name of the Vulnerable Software and Affected Versions: Qualys Jenkins Plugin for WAS versions prior to and including 2.0.11 Description: The issue is related to a missing permission check while performing a connectivity check to Qualys Cloud Services. This flaw allows any user with login access t...

6.5CVSS6.3AI score0.00457EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.6 views

PT-2024-14889 · Qualys · Qualys Jenkins Plugin For Policy Compliance

Name of the Vulnerable Software and Affected Versions: Qualys Jenkins Plugin for Policy Compliance versions prior to and including 1.0.5 Description: The issue is related to a missing permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login...

5.7CVSS5.2AI score0.00458EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.10 views

Jenkins Plugin Qualys Code Issue Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS7.2AI score0.00457EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.6 views

Qualys Jenkins Plugin Code Issue Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A code issue vulnerability...

6.5CVSS7.4AI score0.00547EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/13 6:15 p.m.6 views

CVE-2023-50775

A cross-site request forgery CSRF vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs...

4.3CVSS5.7AI score0.00338EPSS
SaveExploits0References2
Rows per page
Query Builder