Oracle Cloud Infrastructure Compute Classic

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10457 Oct 16, 14:15 Maven MEDIUM This Month

A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Jenkins Oracle Cloud Infrastructure Compute Classic

NVD

CVSS 3.1

4.3

EPSS

0.6%

CVE-2019-10456 Oct 16, 14:15 Maven MEDIUM This Month

A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Oracle Jenkins Oracle Cloud Infrastructure Compute Classic

NVD

CVSS 3.1

4.3

EPSS

0.6%

CVE-2019-10457 Maven

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Oracle Jenkins +1

NVD

CVE-2019-10456 Maven

EPSS 1% CVSS 4.3

MEDIUM This Month

CSRF Oracle Jenkins +1

NVD