CVEs published May 17, 2016
13 CVEs were published on May 17, 2016: 0 critical, 1 high.
- Published
- 13
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- org.jenkins-ci.main:jenkins-core
- 7
- com.thoughtworks.xstream:xstream
- 1
High 1
Medium, low and unrated 12
- CVE-2016-0306IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, miscon
- CVE-2016-0323The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certif
- CVE-2016-3674Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, com.thoughtworks.xstream:xstream
- CVE-2016-3705The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recurs
- CVE-2016-3722Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to loorg.jenkins-ci.main:jenkins-core
- CVE-2016-3723Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation informatorg.jenkins-ci.main:jenkins-core
- CVE-2016-3724Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password informatioorg.jenkins-ci.main:jenkins-core
- CVE-2016-3725Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missorg.jenkins-ci.main:jenkins-core
- CVE-2016-3726Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary weorg.jenkins-ci.main:jenkins-core
- CVE-2016-3727The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permorg.jenkins-ci.main:jenkins-core
- CVE-2016-4425Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via c
- CVE-2016-3721Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environorg.jenkins-ci.main:jenkins-core