Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-23	CVE-2022-34211	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Vrealize Orchestrator A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL. network low complexity jenkins CWE-352	6.5
2022-06-23	CVE-2022-34212	Missing Authorization vulnerability in Jenkins Vrealize Orchestrator A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL. network low complexity jenkins CWE-862	5.7