org.infinispan.server:infinispan-server-feature-pack (8.1.0.beta1), org.infinispan.server:infinispan-server-infinispan (8.1.0.beta1) +32 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.0.beta1)

org.infinispan:infinispan-core MAVEN version 8.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.0.beta1 -...

io.apiman:apiman-gateway-engine-ispn (1.2.2.final), io.apiman:apiman-manager-api-ispn (1.2.2.final) +35 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.1.final)

org.infinispan:infinispan-core MAVEN version 8.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - io.apiman:apiman-gateway-engine-ispn 1.2.2.final - io.apiman:apiman-manager-api-ispn...

org.infinispan.server:infinispan-server-feature-pack (8.1.7.final), org.infinispan.server:infinispan-server-infinispan (8.1.7.final) +33 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.7.final)

org.infinispan:infinispan-core MAVEN version 8.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.7.final -...

org.infinispan.server:infinispan-server-event-logger (8.2.0.beta2), org.infinispan.server:infinispan-server-feature-pack (8.2.0.beta2) +35 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.2.0.beta2)

org.infinispan:infinispan-core MAVEN version 8.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 8.2.0.beta2 -...

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2017-2602 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2598 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2600 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2017-2612 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2610 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2604 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2612 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-2603 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

org.infinispan.server:infinispan-server-feature-pack (8.2.3.final), org.infinispan.server:infinispan-server-infinispan (8.2.3.final) +9 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (8.2.3.final)

org.infinispan:infinispan-server-core MAVEN version 8.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.2.3.final -...

org.infinispan.server:infinispan-server-feature-pack (8.0.1.final), org.infinispan.server:infinispan-server-infinispan (8.0.1.final) +7 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (8.0.1.final)

org.infinispan:infinispan-server-core MAVEN version 8.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.0.1.final -...

GHSA-M728-QVXH-XFJQ Improper Privilege Management in X-Pack

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...

Improper Privilege Management in X-Pack

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...

Elasticsearch subject to cross site scripting

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +5 more potentially affected by CVE-2019-1003018 via org.jenkins-ci.plugins:github-oauth (>=0.14, <=0.20)

org.jenkins-ci.plugins:github-oauth MAVEN version =0.14, =1.0.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.0.0, =1.0.0, =1.1.2 Source cves: CVE-2019-1003018 Source advisory: GHSA-87PJ-9Q82-M9QH...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) potentially affected by CVE-2016-4986 via org.tap4j:tap (1.10)

org.tap4j:tap MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.tap4j:tap and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.0.0, =1.7.1 Source cves: CVE-2016-4986 Source advisory:...