Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ServiceNow Jenkins plug-in for ServiceNow DevOps 1.38.1 Clear all filters
TI-2023-03216 CVE-2023-3442 · GHSA-cj2x-r74q-vcx9

Missing Authorization in Jenkins plug-in for ServiceNow DevOps

Priority LOW 35

A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00711 Published 2023-07-26 Fixed in 1.38.1 CWE-862
TI-2023-03192 CVE-2023-3414 · GHSA-rchx-rvh2-vx5j

Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps

Priority LOW 29

A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00413 Published 2023-07-26 Fixed in 1.38.1 CWE-352