oracle communications cloud native core automated test suite 1.9.0 vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and previous versions, 2.121.1 and previous versions in User.java that allows malicious users to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins ho...

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

7.5

CVSSv3

A arbitrary file read vulnerability exists in Jenkins 2.132 and previous versions, 2.121.1 and previous versions in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows malicious users to send crafted HTTP requests returning the contents of any file on th...

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

1 EDB exploit

4.3

CVSSv3

A Improper authorization vulnerability exists in Jenkins 2.132 and previous versions, 2.121.1 and previous versions in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches.

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

1 Github repository

5.4

CVSSv3

A cross-site scripting vulnerability exists in Jenkins 2.132 and previous versions, 2.121.1 and previous versions in BuildTimelineWidget.java, BuildTimelineWidget/control.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in anot...

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

5.4

CVSSv3

A cross-site scripting vulnerability exists in Jenkins 2.132 and previous versions, 2.121.1 and previous versions in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to control the existence of some URLs in Jenkins to define...

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

5.4

CVSSv3

Jenkins Matrix Project Plugin 1.19 and previous versions does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

Jenkins Matrix Project Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

4.3

CVSSv3

A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and previous versions allows malicious users to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Jenkins Mailer 391.ve4a 38c1b Cf4b Jenkins Mailer Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

4.3

CVSSv3

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and previous versions allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Jenkins Mailer 391.ve4a 38c1b Cf4b Jenkins Mailer Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

8.1

CVSSv3

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and previous versions and Jenkins LTS 2.164.1 and previous versions, because the fix for CVE-2019-1003004 in these releases d...

Jenkins Jenkins Redhat Openshift Container Platform 3.11 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0

5.4

CVSSv3

The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and previous versions and Jenkins LTS 2.164.1 and previous versions, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job...

Jenkins Jenkins Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Redhat Openshift Container Platform 3.11

Get Started

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook