VendorsJenkinsvalgrindany version
Vulnerabilities

Jenkins Valgrind any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2020-2245
Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published 2020-09-01 · Modified
7.1EPSS 0.009
CVE-2020-2246
Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.
Published 2020-09-01 · Modified
5.4EPSS 0.008