Veille CVE

Recherche « Jenkins Project Jenkins OWASP Dependency-Check Plugin »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins OWASP Dependency-Check Plugin » ✕
  1. CVE-2026-92136 8.0 Élevée

    Jenkins Project Jenkins OWASP Dependency-Check Plugin

    Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.