Lucene search
HistoryNov 15, 2022 - 8:15 p.m.
CVE-2022-45400
jenkins
japex plugin
xml
external entity
xxe
vulnerability
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
60.5%
Jenkins JAPEX Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected configurations
Node
jenkinsjapexRange≤1.7jenkins
Related
cvelist
cvelist
CVE-2022-45400
2022-11-15 00:00:00
osv
osv
XXE vulnerability in Jenkins JAPEX Plugin
2022-11-16 12:00:23
prion
prion
Xxe
2022-11-15 20:15:00
cve
cve
CVE-2022-45400
2022-11-15 20:15:14
github
github
XXE vulnerability in Jenkins JAPEX Plugin
2022-11-16 12:00:23
nessus
nessus
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
60.5%
Related for NVD:CVE-2022-45400