Known vulnerabilities in RapidDeploy
Vendor:
Jenkins
Software:
RapidDeploy
Software CPE:
cpe:2.3:a:jenkins:rapiddeploy:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU26401 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-2171 |
CWE-611 | Medium | 4.2.1 | 26.03.2020 |
SB2020032616 |
||
| #VU26400 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2170 |
CWE-79 | Low | 4.2.1 | 26.03.2020 |
SB2020032616 |
||
| #VU23698 - Server-Side Request Forgery (SSRF) CVE-2019-16571 |
CWE-918 | Medium | - | 19.12.2019 | - | ||
| #VU23697 - Cross-Site Request Forgery (CSRF) CVE-2019-16570 |
CWE-352 | Low | - | 19.12.2019 | - |