Media
CVE-2017-2600
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2017-2594
Path Traversal in io.hawt:project
Crítica
CVE-2017-2589
Insecure cookie sharing in Hawtio
Media
CVE-2017-2612
Incorrect Permission Assignment for Critical Resource in Jenkins
Media
CVE-2017-2606
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Media
CVE-2017-2610
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2017-2604
Improper Authentication in Jenkins
Media
CVE-2017-2613
Cross-Site Request Forgery in Jenkins
Alta
CVE-2017-2608
Deserialization of Untrusted Data in Jenkins
Baja
CVE-2017-2603
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Media
CVE-2017-2609
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Media
CVE-2017-2607
Improper Neutralization of Input During Web Page Generation in Jenkins
Alta
CVE-2017-2649
Jenkins Active Directory Plugin did not verify certificate of AD server
Media
CVE-2017-2638
Infinispan Rest API Does Not Enforce Auth Constraints
Baja
CVE-2017-2651
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-plugin
Media
CVE-2017-2654
Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin
Media
CVE-2017-2648
Jenkins SSH Build Agents Plugin did not verify host keys
Alta
CVE-2017-2652
Missing permission checks in Jenkins Distributed Fork Plugin
Alta
CVE-2017-2650
Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass
Crítica
CVE-2017-3202
Deserialization of Untrusted Data in Flamingo amf-serializer
Alta
CVE-2017-3203
Deserialization of Untrusted Data in Spring-flex
Media
CVE-2017-7545
XML External Entity Reference in jbpmmigration
Media
CVE-2017-7559
Undertow vulnerable to Request Smuggling
Alta
CVE-2017-7556
Cross-Site Request Forgery in hawtio
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.