Known vulnerabilities in Maven Metadata for CI server 1.4.1
Vendor:
Jenkins
Software:
Maven Metadata for CI server
Version:
1.4.1
Software CPE:
cpe:2.3:a:jenkins:maven_metadata_for_ci_server:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Vulnerabilities by Severity
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36905 |
CWE-79 | Low | - | 02.08.2022 |
SB2022080210 |
||
| #VU64624 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-34190 |
CWE-79 | Low | - | 23.06.2022 |
SB2022062334 |