Unspecified Vulnerability in CloudBees Jenkins HP ALM Quality Center Plugin

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . A security vulnerability exists in...

CVE-2020-2218

Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...

Design/Logic Flaw

Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...

CVE-2020-2218

The CVE-2020-2218 entry concerns Jenkins HP ALM Quality Center Plugin (versions 1.6 and earlier). The vulnerability arises because the plugin stores a password unencrypted in the global configuration file on the Jenkins master, specifically in org.jenkinsci.plugins.qc.QualityCenterIntegrationReco...

CVE-2020-2218

Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...

CVE-2019-19913

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...

CVE-2019-19912

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...

Cross site scripting

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...

CVE-2019-19912

Intland codeBeamer ALM

CVE-2019-19913

Intland codeBeamer ALM 9.5 and earlier is affected by a stored XSS vulnerability in the Trackers Title parameter. The root cause is improper handling/validation of this input, allowing injected scripts to execute in the context of the vulnerable page. Affected software: codeBeamer ALM 9.5 and ear...

CVE-2019-19913

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...

CVE-2020-9344

Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...

CVE-2020-9344

Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...

Cross site scripting

Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...

CVE-2020-9344

CVE-2020-9344 affects Jira Subversion ALM for Enterprise prior to 8.8.2. The connected nuclei data confirms a cross-site scripting (XSS) vulnerability at multiple locations in the web application, enabling an attacker to execute arbitrary JavaScript in the victim’s browser. Root cause is cited as...

CVE-2020-9344

Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...

CVE-2019-10444

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...

CVE-2019-10444

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...

Design/Logic Flaw

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...

CVE-2019-10444

The CVE-2019-10444 entry concerns Jenkins Bumblebee HP ALM Plugin (version 4.1.3 and earlier) that unconditionally disabled SSL/TLS and hostname/certificate validation when connecting to HP ALM. This creates a risk of man‑in‑the‑middle if connections are not properly trusted. Public details confi...