Nested View

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34182 Maven MEDIUM PATCH This Month

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Jenkins Nested View

NVD

CVSS 3.1

6.1

EPSS

0.9%

CVE-2021-21680 Maven HIGH PATCH This Week

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins XXE Nested View

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2022-34182 Maven

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Jenkins Nested View

NVD

CVE-2021-21680 Maven

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Jenkins XXE Nested View

NVD