Skip to main content

Nested View

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-34182 Jun 23, 17:15 Maven MEDIUM PATCH This Month

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Jenkins Nested View
NVD
CVSS 3.1
6.1
EPSS
0.9%
CVE-2021-21680 Aug 31, 14:15 Maven HIGH PATCH This Week

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XXE Jenkins Nested View
NVD
CVSS 3.1
7.1
EPSS
1.3%
CVE-2022-34182 Maven
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Jenkins Nested View
NVD
CVE-2021-21680 Maven
EPSS 1% CVSS 7.1
HIGH PATCH This Week

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XXE Jenkins Nested View
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy