Known vulnerabilities in OWASP Dependency-Check

Vendor: Jenkins
Software CPE: cpe:2.3:a:jenkins:owasp_dependency-check:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OWASP Dependency-Check OWASP Dependency-Check is affected by 3 known vulnerabilities: 3 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-92136
CWE-79 Low
No
No
5.6.5 21.09.2026 SB2026092118
#VU87290 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28153
CWE-79 Low
No
No
5.4.6 08.03.2024 SB2024030818
#VU58152 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-43577
CWE-611 Low
No
No
- 15.11.2021 SB2021111508