PM
Product
Pipeline Maven Integration
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Pipeline Maven Integration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10327 | 8.1 | May 31 | An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary directory's content on… Affected: through 1.7.0 |
| CVE-2020-2235 | 6.5 | Aug 12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL… Affected: through 3.8.2 |
| CVE-2020-2234 | 6.5 | Aug 12 | A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using… Affected: through 3.8.2 |
| CVE-2020-2233 | 6.5 | Aug 12 | A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored… Affected: through 3.8.2 |
| CVE-2020-2256 | 5.4 | Sep 16 | Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site… Affected: through 3.9.2 |
| CVE-2023-41934 | 5.3 | Sep 6 | Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven… Affected: through 1330.v18e473854496 |
Showing 6