Jenkins Sounds vulnerabilities

2 CVEs affecting Jenkins Sounds, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-2098, published 2020-01-15.

More from Jenkins.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-2097, published 2020-01-15. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS…
• CVE-2020-2098, published 2020-01-15. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.