Jenkins ServiceNow Devops vulnerabilities

2 CVEs affecting Jenkins ServiceNow Devops, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-3442, published 2023-07-26.

More from Jenkins.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-3442, published 2023-07-26. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive…
• CVE-2023-3414, published 2023-07-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of…