CVE-2020-2108

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with…

published January 29, 2020

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00904 · 59.4th percentile
Published
2020-01-29T15:15Z
EPSS history
Timeline
  • 29 JAN 15:15Z
    Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with…
    cvelistv5