Archive

28 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /28 September 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2019-10391

Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

Jenkins Project Jenkins IBM Application Security on Cloud Plugin com.hcl.security:ibm-application-security Web / CMS Maven

Aug 28, 2019
Medium 4.8

CVE-2019-10383

Improper Neutralization of Input During Web Page Generation in Jenkins

A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Aug 28, 2019