Netsparker Cloud Scan Security Vulnerabilities and Issues — Netsparker Cloud Scan CVE List

Lucene search

JenkinsNetsparker Cloud Scan

2 matches found

CVE•added 2019/04/04 4:29 p.m.•42 views

CVE-2019-10289

A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers to initiate a connection to an attacker-specified server.

6.5CVSS6.3AI score0.00142EPSS

CVE•added 2019/04/04 4:29 p.m.•33 views

CVE-2019-10290

A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

6.5CVSS6.2AI score0.00084EPSS