Jenkins Compuware Topaz Utilities vulnerabilities

2 CVEs affecting Jenkins Compuware Topaz Utilities, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43422, published 2022-10-19.

More from Jenkins.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-43422, published 2022-10-19. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to…
• CVE-2022-36895, published 2022-07-27. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and…