Jenkins Pipeline Aggregator View vulnerabilities

2 CVEs affecting Jenkins Pipeline Aggregator View, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28670, published 2023-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-16564, published 2019-12-17. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content…
CVE-2023-28670, published 2023-04-02. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS)…