CVE-2019-16558: Jenkins Spira Importer

High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Affected products

• Jenkins Spira Importer: up to and including 3.2.3

Published 2019-12-17. Last modified 2026-06-17.