Jclouds

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10369 Maven MEDIUM PATCH This Month

A missing permission check in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Jclouds

NVD

CVSS 3.1

6.5

EPSS

1.0%

CVE-2019-10368 Maven HIGH PATCH This Week

A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins CSRF Jclouds

NVD

CVSS 3.0

8.8

EPSS

0.8%

CVE-2019-10369 Maven

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Authentication Bypass Jenkins Jclouds

NVD

CVE-2019-10368 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Jenkins CSRF Jclouds

NVD