High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-21	CVE-2022-41234	Missing Authorization vulnerability in Jenkins Rundeck Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing users with Overall/Read permission to trigger jobs that are configured to be triggerable via Rundeck. network low complexity jenkins CWE-862	8.8
2020-03-09	CVE-2020-2144	XXE vulnerability in Jenkins Rundeck Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. network low complexity jenkins CWE-611	7.1