← Database

CVE-2022-41226

CRITICAL CVSS: 9.8 Published: 2022-09-21 Modified: 2026-06-17

Description

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected Platforms

Jenkins Compuware Common Configuration

Weakness Type

CWE-611, CWE-611

References