Tagged “maven”
CVEs tagged maven, newest first.
454 CVEsRSS
CVE-2026-12975High· 8.5A flaw was found in Apicurio Registry
A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission …
CVE-2026-9800High· 8.1A flaw was found in Keycloak Policy Enforcer
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured acce…
CVE-2026-57300Medium· 4.3Jenkins MCP Server Plugin missing a permission check
Jenkins MCP Server Plugin missing a permission check
CVE-2026-57301High· 8.8Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE
Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE
CVE-2026-57303High· 7.1Jenkins Assembla Plugin has an XXE vulnerability
Jenkins Assembla Plugin has an XXE vulnerability
CVE-2026-57302Medium· 4.3Jenkins FitNesse Plugin stores passwords unencrypted
Jenkins FitNesse Plugin stores passwords unencrypted
CVE-2026-57306Medium· 4.2Jenkins Zowe zDevOps Plugin has a CSRF vulnerability
Jenkins Zowe zDevOps Plugin has a CSRF vulnerability
CVE-2026-57305Medium· 5.4Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability
CVE-2026-57304Medium· 5.4Jenkins Assembla Plugin has a missing permission check
Jenkins Assembla Plugin has a missing permission check
CVE-2026-57307Medium· 4.2Jenkins Zowe zDevOps Plugin has a missing permission check
Jenkins Zowe zDevOps Plugin has a missing permission check
CVE-2026-12986HighPayara Server Full has a Cross-Site Request Forgery vulnerability
Payara Server Full has a Cross-Site Request Forgery vulnerability
CVE-2026-57296High· 8.8Jenkins External Workspace Manager Plugin has a path traversal vulnerability
Jenkins External Workspace Manager Plugin has a path traversal vulnerability
CVE-2026-57295Medium· 5.4Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
CVE-2026-57288Low· 3.7Jenkins Active Directory Plugin has an LDAP injection vulnerability
Jenkins Active Directory Plugin has an LDAP injection vulnerability
CVE-2026-57294Medium· 5.4Jenkins EC2 Fleet Plugin has a missing permission check
Jenkins EC2 Fleet Plugin has a missing permission check
CVE-2026-57293Medium· 4.3Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
CVE-2026-57292Medium· 5.4Jenkins Gitee Plugin has a cross-site request forgery vulnerability
Jenkins Gitee Plugin has a cross-site request forgery vulnerability
CVE-2026-57290Medium· 4.3Jenkins Priority Sorter Plugin has a CSRF vulnerability
Jenkins Priority Sorter Plugin has a CSRF vulnerability
CVE-2026-57289Medium· 4.8Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation
Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation
CVE-2026-57298Medium· 5.4Jenkins Contrast Continuous Application Security Plugin has a CSRF vulnerability
Jenkins Contrast Continuous Application Security Plugin has a CSRF vulnerability
CVE-2026-57291Medium· 5.4Jenkins Gitee Plugin missing permission checks
Jenkins Gitee Plugin missing permission checks
CVE-2026-57280High· 8.8Jenkins Script Security Plugin sandbox bypass vulnerability
Jenkins Script Security Plugin sandbox bypass vulnerability
CVE-2026-57281High· 7.5Jenkins Script Security Plugin has a script security bypass vulnerability
Jenkins Script Security Plugin has a script security bypass vulnerability
CVE-2026-57286Medium· 4.3Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names
Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names
CVE-2026-57284Medium· 4.3Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types
Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types
CVE-2026-57282Medium· 5.0Jenkins Git client Plugin has an OS command injection vulnerability on agents
Jenkins Git client Plugin has an OS command injection vulnerability on agents
CVE-2026-57285Medium· 4.3Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
CVE-2026-57283Medium· 4.3Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability
Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability
CVE-2026-57287Medium· 4.3Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations
Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations
CVE-2026-57299Medium· 4.3Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.