Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2554▼ 405 respecto a la semana anterior

Críticas / altas1317▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)59▼ 467 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-84674	Pendiente de análisis	Media (5.4)	0.23%	—	Xebialabs XL Deploy^AI Jenkins^AI	2/9/2026	3/9/2026	Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2021-21665	Modificada	Alta (8.8)	0.66%	—	Jenkins Xebialabs XL Deploy	10/6/2021	17/6/2026	A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
CVE-2021-21664	Modificada	Media (6.5)	0.99%	—	Jenkins Xebialabs XL Deploy	10/6/2021	17/6/2026	An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
CVE-2021-21663	Modificada	Media (4.3)	1.0%	—	Jenkins Xebialabs XL Deploy	10/6/2021	17/6/2026	A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.
CVE-2021-21662	Modificada	Media (4.3)	0.95%	—	Jenkins Xebialabs XL Deploy	10/6/2021	17/6/2026	A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
CVE-2019-10305	Modificada	Media (6.5)	1.0%	—	Jenkins Xebialabs XL Deploy	18/4/2019	17/6/2026	A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVE-2019-10304	Modificada	Media (6.5)	0.89%	—	Jenkins Xebialabs XL Deploy	18/4/2019	17/6/2026	A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.