CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-36897

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.5%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2022-36897

Jenkins » Compuware Xpediter Code Coverage » Version: N/A

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:-
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.0

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.0
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.2

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.2
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.3

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.3
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.4

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.4
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.5

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.5
Jenkins » Compuware Xpediter Code Coverage » Version: 1.0.7

cpe:2.3:a:jenkins:compuware_xpediter_code_coverage:1.0.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-36897

Products

Pricing

Contact Us