Vulnerabilities > Jenkins > Oracle Cloud Infrastructure Compute Classic > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-10-16	CVE-2019-10457	Missing Authorization vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic 1.0.0 A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. network low complexity jenkins CWE-862	4.3
2019-10-16	CVE-2019-10456	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic 1.0.0 A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials. network low complexity jenkins CWE-352	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.