Skip to main content

Web Application Screening

1 CVEs product

Monthly

CVE-2023-6149 Maven MEDIUM PATCH This Month

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. This XML External Entity (XXE) vulnerability could allow attackers to read arbitrary files or perform SSRF through XML processing.

XXE Jenkins Web Application Screening
NVD
CVSS 3.1
5.7
EPSS
0.2%
EPSS 0% CVSS 5.7
MEDIUM PATCH This Month

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. This XML External Entity (XXE) vulnerability could allow attackers to read arbitrary files or perform SSRF through XML processing.

XXE Jenkins Web Application Screening
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy