Collabnet

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-38665 Maven MEDIUM PATCH This Month

Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jenkins Collabnet

NVD

CVSS 3.1

6.5

EPSS

0.7%

CVE-2018-1000605 Maven HIGH PATCH This Week

A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java Jenkins Information Disclosure Collabnet

NVD

CVSS 3.0

7.4

EPSS

0.9%

CVE-2022-38665 Maven

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Jenkins Collabnet

NVD

CVE-2018-1000605 Maven

EPSS 1% CVSS 7.4

HIGH PATCH This Week

Java Jenkins Information Disclosure +1

NVD