CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/06/23 5:15 p.m.•18 views

CVE-2022-34211

A cross-site request forgery CSRF vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL...

6.5CVSS0.00495EPSS

SaveExploits0References1

Prion•added 2022/06/23 5:15 p.m.•18 views

Design/Logic Flaw

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL...

3.5CVSS5.3AI score0.00656EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/06/22 12:00 a.m.•3 views

CVE-2022-34212: Missing Authorization

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL...

5.7CVSS6.1AI score0.00656EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2022/06/22 12:00 a.m.•3 views

CVE-2022-34211: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL...

6.5CVSS6.6AI score0.00495EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by