Cloudbees Jenkins Lts vulnerabilities

2 known vulnerabilities affecting cloudbees/jenkins_lts.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2015-1811HIGHCVSS 7.5vbefore 1.596.12020-01-15

CVE-2015-1811 [HIGH] CWE-611 CVE-2015-1811: XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 all XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

CVE-2015-1809HIGHCVSS 7.5vbefore 1.596.12020-01-15

CVE-2015-1809 [HIGH] CWE-611 CVE-2015-1809: XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 all XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.