Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jenkins owasp dependency-check vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2017-1000109
The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.
Jenkins Owasp Dependency-check 1.0.1Jenkins Owasp Dependency-check 1.0.7Jenkins Owasp Dependency-check 1.1.0Jenkins Owasp Dependency-check 1.1.4.1Jenkins Owasp Dependency-check 1.2.1Jenkins Owasp Dependency-check 1.2.4Jenkins Owasp Dependency-check 1.2.6Jenkins Owasp Dependency-check 1.2.11.1Jenkins Owasp Dependency-check 1.3.1Jenkins Owasp Dependency-check 1.3.6Jenkins Owasp Dependency-check 1.4.1Jenkins Owasp Dependency-check 2.0.0Jenkins Owasp Dependency-check 2.0.1.1Jenkins Owasp Dependency-check 1.1.1.1Jenkins Owasp Dependency-check 1.1.1.2Jenkins Owasp Dependency-check 1.1.2Jenkins Owasp Dependency-check 1.1.3Jenkins Owasp Dependency-check 1.2.7.1Jenkins Owasp Dependency-check 1.2.8Jenkins Owasp Dependency-check 1.2.9Jenkins Owasp Dependency-check 1.2.10Jenkins Owasp Dependency-check 1.4.2
5.5
CVSSv2
CVE-2021-43577
Jenkins OWASP Dependency-Check Plugin 5.1.1 and previous versions does not configure its XML parser to prevent XML external entity (XXE) attacks.
Jenkins Owasp Dependency-check
NA
CVE-2024-28153
Jenkins OWASP Dependency-Check Plugin 5.4.5 and previous versions does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting (XSS) vulnerability.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook