Lucene search

Deploy Weblogic Security Vulnerabilities - January

cve

CVE-2019-10464

A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

8.8CVSS

8.5AI Score

0.001EPSS

2019-10-23 01:15 PM

cve

CVE-2019-10465

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

4.3CVSS

4.3AI Score

0.0005EPSS

2019-10-23 01:15 PM