CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10466

An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.7%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 5.5

References

Products affected by CVE-2019-10466

Jenkins » 360 Fireline » Version: 1.0

cpe:2.3:a:jenkins:360_fireline:1.0
Jenkins » 360 Fireline » Version: 1.3

cpe:2.3:a:jenkins:360_fireline:1.3
Jenkins » 360 Fireline » Version: 1.4

cpe:2.3:a:jenkins:360_fireline:1.4
Jenkins » 360 Fireline » Version: 1.4.1

cpe:2.3:a:jenkins:360_fireline:1.4.1
Jenkins » 360 Fireline » Version: 1.4.20

cpe:2.3:a:jenkins:360_fireline:1.4.20
Jenkins » 360 Fireline » Version: 1.4.21

cpe:2.3:a:jenkins:360_fireline:1.4.21
Jenkins » 360 Fireline » Version: 1.4.22

cpe:2.3:a:jenkins:360_fireline:1.4.22
Jenkins » 360 Fireline » Version: 1.4.3

cpe:2.3:a:jenkins:360_fireline:1.4.3
Jenkins » 360 Fireline » Version: 1.4.4

cpe:2.3:a:jenkins:360_fireline:1.4.4
Jenkins » 360 Fireline » Version: 1.4.4.2

cpe:2.3:a:jenkins:360_fireline:1.4.4.2
Jenkins » 360 Fireline » Version: 1.4.40

cpe:2.3:a:jenkins:360_fireline:1.4.40
Jenkins » 360 Fireline » Version: 1.4.41

cpe:2.3:a:jenkins:360_fireline:1.4.41
Jenkins » 360 Fireline » Version: 1.4.42

cpe:2.3:a:jenkins:360_fireline:1.4.42
Jenkins » 360 Fireline » Version: 1.4.43

cpe:2.3:a:jenkins:360_fireline:1.4.43
Jenkins » 360 Fireline » Version: 1.4.60

cpe:2.3:a:jenkins:360_fireline:1.4.60
Jenkins » 360 Fireline » Version: 1.4.61

cpe:2.3:a:jenkins:360_fireline:1.4.61
Jenkins » 360 Fireline » Version: 1.4.80

cpe:2.3:a:jenkins:360_fireline:1.4.80
Jenkins » 360 Fireline » Version: 1.4.81

cpe:2.3:a:jenkins:360_fireline:1.4.81
Jenkins » 360 Fireline » Version: 1.4.82

cpe:2.3:a:jenkins:360_fireline:1.4.82
Jenkins » 360 Fireline » Version: 1.4.83

cpe:2.3:a:jenkins:360_fireline:1.4.83
Jenkins » 360 Fireline » Version: 1.4.84

cpe:2.3:a:jenkins:360_fireline:1.4.84
Jenkins » 360 Fireline » Version: 1.4.90

cpe:2.3:a:jenkins:360_fireline:1.4.90
Jenkins » 360 Fireline » Version: 1.4.91

cpe:2.3:a:jenkins:360_fireline:1.4.91
Jenkins » 360 Fireline » Version: 1.5.0

cpe:2.3:a:jenkins:360_fireline:1.5.0
Jenkins » 360 Fireline » Version: 1.5.1

cpe:2.3:a:jenkins:360_fireline:1.5.1
Jenkins » 360 Fireline » Version: 1.5.10

cpe:2.3:a:jenkins:360_fireline:1.5.10
Jenkins » 360 Fireline » Version: 1.5.11

cpe:2.3:a:jenkins:360_fireline:1.5.11
Jenkins » 360 Fireline » Version: 1.5.12

cpe:2.3:a:jenkins:360_fireline:1.5.12
Jenkins » 360 Fireline » Version: 1.5.13

cpe:2.3:a:jenkins:360_fireline:1.5.13
Jenkins » 360 Fireline » Version: 1.5.14

cpe:2.3:a:jenkins:360_fireline:1.5.14
Jenkins » 360 Fireline » Version: 1.5.15

cpe:2.3:a:jenkins:360_fireline:1.5.15
Jenkins » 360 Fireline » Version: 1.5.16

cpe:2.3:a:jenkins:360_fireline:1.5.16
Jenkins » 360 Fireline » Version: 1.5.17

cpe:2.3:a:jenkins:360_fireline:1.5.17
Jenkins » 360 Fireline » Version: 1.5.18

cpe:2.3:a:jenkins:360_fireline:1.5.18
Jenkins » 360 Fireline » Version: 1.5.2

cpe:2.3:a:jenkins:360_fireline:1.5.2
Jenkins » 360 Fireline » Version: 1.5.3

cpe:2.3:a:jenkins:360_fireline:1.5.3
Jenkins » 360 Fireline » Version: 1.5.4

cpe:2.3:a:jenkins:360_fireline:1.5.4
Jenkins » 360 Fireline » Version: 1.5.5

cpe:2.3:a:jenkins:360_fireline:1.5.5
Jenkins » 360 Fireline » Version: 1.5.6

cpe:2.3:a:jenkins:360_fireline:1.5.6
Jenkins » 360 Fireline » Version: 1.5.7

cpe:2.3:a:jenkins:360_fireline:1.5.7
Jenkins » 360 Fireline » Version: 1.5.8

cpe:2.3:a:jenkins:360_fireline:1.5.8
Jenkins » 360 Fireline » Version: 1.5.9

cpe:2.3:a:jenkins:360_fireline:1.5.9
Jenkins » 360 Fireline » Version: 1.6.18

cpe:2.3:a:jenkins:360_fireline:1.6.18
Jenkins » 360 Fireline » Version: 1.6.2

cpe:2.3:a:jenkins:360_fireline:1.6.2
Jenkins » 360 Fireline » Version: 1.7.0

cpe:2.3:a:jenkins:360_fireline:1.7.0
Jenkins » 360 Fireline » Version: 1.7.2

cpe:2.3:a:jenkins:360_fireline:1.7.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10466

Products

Pricing

Contact Us