Jenkins Compuware Xpediter Code Coverage vulnerabilities

2 CVEs affecting Jenkins Compuware Xpediter Code Coverage, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43424, published 2022-10-19.

More from Jenkins.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-43424, published 2022-10-19. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent…
• CVE-2022-36897, published 2022-07-27. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations…