Testcomplete Support Security Vulnerabilities and Issues — Testcomplete Support CVE List

Lucene search

JenkinsTestcomplete Support

3 matches found

CVE•added 2023/01/26 9:18 p.m.•70 views

CVE-2023-24443

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

9.8CVSS9.3AI score0.00094EPSS

CVE•added 2020/07/02 3:15 p.m.•60 views

CVE-2020-2209

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

4.3CVSS4.6AI score0.00031EPSS

CVE•added 2023/05/16 5:15 p.m.•36 views

CVE-2023-33002

Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

5.4CVSS5.2AI score0.04879EPSS