# org.jenkins-ci.plugins:websphere-deployer (Maven) vulnerabilities 5 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://central.sonatype.com/artifact/org.jenkins-ci.plugins/websphere-deployer ## Advisories (5) ### [CVE-2020-2108](https://cve.now/CVE-2020-2108): Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a… - Severity: Unrated - Published: Jan 29, 2020 - Affected: through 1.6.1. ### [CVE-2019-16561](https://cve.now/CVE-2019-16561): Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname… - Severity: Unrated - Published: Dec 17, 2019 - Affected: through 1.6.1. ### [CVE-2019-16560](https://cve.now/CVE-2019-16560): A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection… - Severity: Unrated - Published: Dec 17, 2019 - Affected: through 1.6.1. ### [CVE-2019-16559](https://cve.now/CVE-2019-16559): A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform… - Severity: Unrated - Published: Dec 17, 2019 - Affected: through 1.6.1. ### [CVE-2019-1003056](https://cve.now/CVE-2019-1003056): Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by… - Severity: Unrated - Published: Apr 4, 2019 - Affected: through 1.6.1. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.jenkins-ci.plugins:websphere-deployer Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.