Lucene search
+L

8 matches found

OSV
OSV
•added 2024/01/09 9:30 a.m.•37 views

GHSA-RWF9-8FQR-P44M Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

5.7CVSS5.7AI score0.00458EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/01/09 9:30 a.m.•37 views

Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS7AI score0.00547EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2024/01/09 9:15 a.m.•20 views

CVE-2023-6149

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

6.5CVSS5.9AI score0.00457EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/09 9:15 a.m.•25 views

Cross site scripting

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

4.9CVSS6.3AI score0.00458EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/01/09 8:15 a.m.•33 views

CVE-2023-6147

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS5.9AI score0.00547EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/09 8:08 a.m.•43 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.8AI score0.00547EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/09 8:08 a.m.•14 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.1AI score0.00547EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•0 views

CVE-2023-6148: Improper Neutralization of Input During Web Page Generation

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

5.7CVSS6AI score0.00458EPSS
SaveExploits0References3
Rows per page
Query Builder