Known vulnerabilities in Qualys Policy Compliance Scanning Connector

Vendor: Jenkins
Software: Qualys Policy Compliance Scanning Connector
Software CPE: cpe:2.3:a:jenkins:qualys_policy_compliance_scanning_connector:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Qualys Policy Compliance Scanning Connector Qualys Policy Compliance Scanning Connector is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85801 - Improper Access Control
 CWE-284 Medium
No
No
 1.0.6 25.01.2024 SB2024012524
#VU85799 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-6147		 CWE-611 Medium
No
No
 1.0.6 25.01.2024 SB2024012524
#VU85797 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6148		 CWE-79 Low
No
No
 1.0.6 25.01.2024 SB2024012524