Vulnerabilities > Jenkins > Cadence Vmanager

DATE CVE VULNERABILITY TITLE RISK
2020-09-01 CVE-2020-2243 Cross-site Scripting vulnerability in Jenkins Cadence Vmanager
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.
network
low complexity
jenkins CWE-79
5.4
5.4
2019-10-16 CVE-2019-10446 Improper Certificate Validation vulnerability in Jenkins Cadence Vmanager
Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.
network
low complexity
jenkins CWE-295
8.2
8.2