Known vulnerabilities in WebSphere Deployer

Vendor: Jenkins
Software: WebSphere Deployer
Software CPE: cpe:2.3:a:jenkins:websphere_deployer:*:*:*:*:*:jenkins:*:*
Website: https://jenkins.io/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Deployer WebSphere Deployer is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24767 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2108		 CWE-611 High
No
No
 - 30.01.2020 SB2019121822
#VU23679 - Improper Certificate Validation
CVE-2019-16561		 CWE-295 Medium
No
No
 - 18.12.2019 SB2019121822
#VU23678 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16560		 CWE-79 Low
No
No
 - 18.12.2019 SB2019121822
#VU23677 - Improper Access Control
CVE-2019-16559		 CWE-284 Medium
No
No
 - 18.12.2019 SB2019121822