CVE-2019-10464: Jenkins Deploy WebLogic

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

Affected products

• Jenkins Deploy WebLogic: up to and including 4.1

Published 2019-10-23. Last modified 2026-06-17.