Vulnerabilities > Jenkins > Dynatrace Application Monitoring > High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-10-23	CVE-2019-10462	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Dynatrace Application Monitoring A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials. network low complexity jenkins CWE-352	8.1
2019-10-23	CVE-2019-10461	Insufficiently Protected Credentials vulnerability in Jenkins Dynatrace Application Monitoring Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system. local low complexity jenkins CWE-522	7.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.