CVE-2020-2108

CVE-2020-2108: vulnerability in Jenkins WebSphere Deployer Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins WebSphere Deployer Plugin+ Monitor org.jenkins-ci.plugins:websphere-deployer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.
Affected products
Jenkins project · Jenkins WebSphere Deployer Plugin
Related CVEs — Jenkins WebSphere Deployer Plugin

In the same product, most dangerous first.

CVE-2019-1003056—CVE-2019-1003056EPSS 1.4%CVE-2019-16560—CVE-2019-16560EPSS 0.9%CVE-2019-16559—CVE-2019-16559EPSS 0.7%CVE-2019-16561—CVE-2019-16561EPSS 0.5%