Lucene search

Vrealize Orchestrator Security Vulnerabilities - May

cve

CVE-2022-34211

A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL.

6.5CVSS

6.2AI Score

0.001EPSS

2022-06-23 05:15 PM

cve

CVE-2022-34212

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL.

5.7CVSS

5.3AI Score

0.001EPSS

2022-06-23 05:15 PM