Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Jenkins Subscribe
Filtered by product Vrealize Orchestrator
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34211 1 Jenkins 1 Vrealize Orchestrator 2022-06-29 4.3 MEDIUM 6.5 MEDIUM
A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL.
CVE-2022-34212 1 Jenkins 1 Vrealize Orchestrator 2022-06-29 3.5 LOW 5.7 MEDIUM
A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL.