Known vulnerabilities in build-metrics

Vendor: Jenkins
Software: build-metrics
Software CPE: cpe:2.3:a:jenkins:build-metrics:*:*:*:*:*:jenkins:*:*
Website: https://jenkins.io/
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting build-metrics build-metrics is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64898 - Exposure of sensitive information to an unauthorized actor
CVE-2022-34785		 CWE-200 Medium
No
No
 - 04.07.2022 SB2022070419
#VU64895 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34784		 CWE-79 Low
No
No
 - 04.07.2022 SB2022070419
#VU22270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10475		 CWE-79 Low
Available
No
 - 24.10.2019 SB2019102412