Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-16549

Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML documents.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.0%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
Products affected by CVE-2019-16549
  • Jenkins » Maven » Version: 0.14.0
    cpe:2.3:a:jenkins:maven:0.14.0
  • Jenkins » Maven » Version: 0.16.1
    cpe:2.3:a:jenkins:maven:0.16.1


Contact Us

Shodan ® - All rights reserved