CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2247

Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.9%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2020-2247

Jenkins » Klocwork Analysis » Version: N/A

cpe:2.3:a:jenkins:klocwork_analysis:-
Jenkins » Klocwork Analysis » Version: 1.0

cpe:2.3:a:jenkins:klocwork_analysis:1.0
Jenkins » Klocwork Analysis » Version: 1.1

cpe:2.3:a:jenkins:klocwork_analysis:1.1
Jenkins » Klocwork Analysis » Version: 1.10

cpe:2.3:a:jenkins:klocwork_analysis:1.10
Jenkins » Klocwork Analysis » Version: 1.11

cpe:2.3:a:jenkins:klocwork_analysis:1.11
Jenkins » Klocwork Analysis » Version: 1.12

cpe:2.3:a:jenkins:klocwork_analysis:1.12
Jenkins » Klocwork Analysis » Version: 1.13

cpe:2.3:a:jenkins:klocwork_analysis:1.13
Jenkins » Klocwork Analysis » Version: 1.14

cpe:2.3:a:jenkins:klocwork_analysis:1.14
Jenkins » Klocwork Analysis » Version: 1.14.1

cpe:2.3:a:jenkins:klocwork_analysis:1.14.1
Jenkins » Klocwork Analysis » Version: 1.15

cpe:2.3:a:jenkins:klocwork_analysis:1.15
Jenkins » Klocwork Analysis » Version: 1.16.2

cpe:2.3:a:jenkins:klocwork_analysis:1.16.2
Jenkins » Klocwork Analysis » Version: 1.16.3

cpe:2.3:a:jenkins:klocwork_analysis:1.16.3
Jenkins » Klocwork Analysis » Version: 1.17

cpe:2.3:a:jenkins:klocwork_analysis:1.17
Jenkins » Klocwork Analysis » Version: 1.18

cpe:2.3:a:jenkins:klocwork_analysis:1.18
Jenkins » Klocwork Analysis » Version: 1.2

cpe:2.3:a:jenkins:klocwork_analysis:1.2
Jenkins » Klocwork Analysis » Version: 1.23

cpe:2.3:a:jenkins:klocwork_analysis:1.23
Jenkins » Klocwork Analysis » Version: 1.24

cpe:2.3:a:jenkins:klocwork_analysis:1.24
Jenkins » Klocwork Analysis » Version: 1.24.1

cpe:2.3:a:jenkins:klocwork_analysis:1.24.1
Jenkins » Klocwork Analysis » Version: 1.24.2

cpe:2.3:a:jenkins:klocwork_analysis:1.24.2
Jenkins » Klocwork Analysis » Version: 1.24.3

cpe:2.3:a:jenkins:klocwork_analysis:1.24.3
Jenkins » Klocwork Analysis » Version: 1.24.4

cpe:2.3:a:jenkins:klocwork_analysis:1.24.4
Jenkins » Klocwork Analysis » Version: 1.24.5

cpe:2.3:a:jenkins:klocwork_analysis:1.24.5
Jenkins » Klocwork Analysis » Version: 1.24.6

cpe:2.3:a:jenkins:klocwork_analysis:1.24.6
Jenkins » Klocwork Analysis » Version: 1.3

cpe:2.3:a:jenkins:klocwork_analysis:1.3
Jenkins » Klocwork Analysis » Version: 1.4

cpe:2.3:a:jenkins:klocwork_analysis:1.4
Jenkins » Klocwork Analysis » Version: 1.5

cpe:2.3:a:jenkins:klocwork_analysis:1.5
Jenkins » Klocwork Analysis » Version: 1.6

cpe:2.3:a:jenkins:klocwork_analysis:1.6
Jenkins » Klocwork Analysis » Version: 1.7

cpe:2.3:a:jenkins:klocwork_analysis:1.7
Jenkins » Klocwork Analysis » Version: 1.8

cpe:2.3:a:jenkins:klocwork_analysis:1.8
Jenkins » Klocwork Analysis » Version: 1.8.1

cpe:2.3:a:jenkins:klocwork_analysis:1.8.1
Jenkins » Klocwork Analysis » Version: 1.9

cpe:2.3:a:jenkins:klocwork_analysis:1.9
Jenkins » Klocwork Analysis » Version: 2.0

cpe:2.3:a:jenkins:klocwork_analysis:2.0
Jenkins » Klocwork Analysis » Version: 2.1

cpe:2.3:a:jenkins:klocwork_analysis:2.1
Jenkins » Klocwork Analysis » Version: 2.2

cpe:2.3:a:jenkins:klocwork_analysis:2.2
Jenkins » Klocwork Analysis » Version: 2.2.1

cpe:2.3:a:jenkins:klocwork_analysis:2.2.1
Jenkins » Klocwork Analysis » Version: 2.2.2

cpe:2.3:a:jenkins:klocwork_analysis:2.2.2
Jenkins » Klocwork Analysis » Version: 2.2.3

cpe:2.3:a:jenkins:klocwork_analysis:2.2.3
Jenkins » Klocwork Analysis » Version: 2.3

cpe:2.3:a:jenkins:klocwork_analysis:2.3
Jenkins » Klocwork Analysis » Version: 2.3.1

cpe:2.3:a:jenkins:klocwork_analysis:2.3.1
Jenkins » Klocwork Analysis » Version: 2.3.2

cpe:2.3:a:jenkins:klocwork_analysis:2.3.2
Jenkins » Klocwork Analysis » Version: 2.3.3

cpe:2.3:a:jenkins:klocwork_analysis:2.3.3
Jenkins » Klocwork Analysis » Version: 2.3.4

cpe:2.3:a:jenkins:klocwork_analysis:2.3.4
Jenkins » Klocwork Analysis » Version: 2.3.5

cpe:2.3:a:jenkins:klocwork_analysis:2.3.5
Jenkins » Klocwork Analysis » Version: 2.3.6

cpe:2.3:a:jenkins:klocwork_analysis:2.3.6
Jenkins » Klocwork Analysis » Version: 2.3.7

cpe:2.3:a:jenkins:klocwork_analysis:2.3.7
Jenkins » Klocwork Analysis » Version: 2.3.8

cpe:2.3:a:jenkins:klocwork_analysis:2.3.8
Jenkins » Klocwork Analysis » Version: 2.3.9

cpe:2.3:a:jenkins:klocwork_analysis:2.3.9
Jenkins » Klocwork Analysis » Version: 2.4.0

cpe:2.3:a:jenkins:klocwork_analysis:2.4.0
Jenkins » Klocwork Analysis » Version: 2.4.1

cpe:2.3:a:jenkins:klocwork_analysis:2.4.1
Jenkins » Klocwork Analysis » Version: 2.4.2

cpe:2.3:a:jenkins:klocwork_analysis:2.4.2
Jenkins » Klocwork Analysis » Version: 2.4.3

cpe:2.3:a:jenkins:klocwork_analysis:2.4.3
Jenkins » Klocwork Analysis » Version: 2.4.4

cpe:2.3:a:jenkins:klocwork_analysis:2.4.4
Jenkins » Klocwork Analysis » Version: 2.4.5

cpe:2.3:a:jenkins:klocwork_analysis:2.4.5
Jenkins » Klocwork Analysis » Version: 2.4.6

cpe:2.3:a:jenkins:klocwork_analysis:2.4.6
Jenkins » Klocwork Analysis » Version: 2.4.7

cpe:2.3:a:jenkins:klocwork_analysis:2.4.7
Jenkins » Klocwork Analysis » Version: 2.4.8

cpe:2.3:a:jenkins:klocwork_analysis:2.4.8
Jenkins » Klocwork Analysis » Version: 2.4.9

cpe:2.3:a:jenkins:klocwork_analysis:2.4.9
Jenkins » Klocwork Analysis » Version: 2.5.0

cpe:2.3:a:jenkins:klocwork_analysis:2.5.0
Jenkins » Klocwork Analysis » Version: 2.5.1

cpe:2.3:a:jenkins:klocwork_analysis:2.5.1
Jenkins » Klocwork Analysis » Version: 2.5.2

cpe:2.3:a:jenkins:klocwork_analysis:2.5.2
Jenkins » Klocwork Analysis » Version: 2.5.3

cpe:2.3:a:jenkins:klocwork_analysis:2.5.3
Jenkins » Klocwork Analysis » Version: 2020.2

cpe:2.3:a:jenkins:klocwork_analysis:2020.2
Jenkins » Klocwork Analysis » Version: 2020.2.1

cpe:2.3:a:jenkins:klocwork_analysis:2020.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2247

Products

Pricing

Contact Us