Sumologic Publisher

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37959 Jul 12, 16:15 Maven MEDIUM This Month

A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Sumologic Publisher

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2023-37958 Jul 12, 16:15 Maven HIGH This Week

A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Sumologic Publisher

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2023-37959 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass Jenkins Sumologic Publisher

NVD

CVE-2023-37958 Maven

EPSS 1% CVSS 8.8

HIGH This Week

CSRF Jenkins Sumologic Publisher

NVD