CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/11/15 8:15 p.m.•22 views

CVE-2022-45395

Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.8CVSS0.01057EPSS

Exploits0References2

Vulnrichment•added 2022/11/15 12:0 a.m.•8 views

CVE-2022-45395

Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.7AI score0.01057EPSS

Exploits0References2

CVE•added 2022/11/15 12:0 a.m.•278 views

CVE-2022-45395

CVE-2022-45395 affects Jenkins CCCC Plugin 0.6 and earlier. The root cause is that its XML parser is not configured to prevent XML External Entity (XXE) attacks, which can allow an attacker to access or manipulate data in the published CCCC report via crafted XML. The connected documents confirm ...

9.8CVSS9.3AI score0.01057EPSS

Exploits0References2Affected Software1