Skip to content

Known vulnerabilities in Jenkins project Jenkins RQM Plugin

Is your version affected?

CVE Summary Score Published
CVE-2022-41241 Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks 9.8 Critical Sep 21, 2022
CVE-2022-34810 A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate… Not rated Jun 30, 2022
CVE-2022-34809 Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins… Not rated Jun 30, 2022

Other Jenkins project products