CVE-2023-35142
- EPSS 0.05%
- Veröffentlicht 14.06.2023 13:15:11
- Zuletzt bearbeitet 02.01.2025 21:15:09
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.
CVE-2022-46684
- EPSS 2.95%
- Veröffentlicht 12.12.2022 09:15:13
- Zuletzt bearbeitet 23.04.2025 16:15:28
Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.
CVE-2022-25200
- EPSS 0.06%
- Veröffentlicht 15.02.2022 17:15:10
- Zuletzt bearbeitet 21.11.2024 06:51:47
A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing cred...
CVE-2022-25201
- EPSS 0.11%
- Veröffentlicht 15.02.2022 17:15:10
- Zuletzt bearbeitet 21.11.2024 06:51:47
Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing ...