Product

com.thalesgroup.hudson.plugins/sourcemonitor vulnerabilities

1 published CVE affecting com.thalesgroup.hudson.plugins/sourcemonitor, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.thalesgroup.hudson.plugins/sourcemonitor CVEs

Newest publication first

CVE-2022-45396 XXE vulnerability on agents in Jenkins SourceMonitor Plugin
Published 2022-11-15

CriticalCVSS 9.8 EPSS 1.2%

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.thalesgroup.hudson.plugins/sourcemonitor vulnerabilities

Latest com.thalesgroup.hudson.plugins/sourcemonitor CVEs

CVE-2022-45396 XXE vulnerability on agents in Jenkins SourceMonitor Plugin