Websphere Deployer Security Vulnerabilities and Issues — Websphere Deployer CVE List

Lucene search

JenkinsWebsphere Deployer

2 matches found

CVE•added 2020/01/29 4:15 p.m.•56 views

CVE-2020-2108

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.

7.6CVSS7.5AI score0.0006EPSS

CVE•added 2019/12/17 3:15 p.m.•39 views

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

7.1CVSS6.8AI score0.00026EPSS