Search vulnerabilities

Results 2

Export CSV
CVE-2014-3678

jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113)

Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
CVE-2014-3679

jenkins: lack of access control in the monitoring plug-in (SECURITY-113)

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Vendors