CVE-2017-1000109

Published: Oct 5, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

Affected (51)

Products: Jenkins: Owasp Dependency Check

Jenkins

1 product

Owasp Dependency Check

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Jenkins Owasp Dependency Check	Version 1.0.1.1
Jenkins Owasp Dependency Check	Version 1.0.1
Jenkins Owasp Dependency Check	Version 1.0.2
Jenkins Owasp Dependency Check	Version 1.0.3
Jenkins Owasp Dependency Check	Version 1.0.4.1
Jenkins Owasp Dependency Check	Version 1.0.4
Jenkins Owasp Dependency Check	Version 1.0.5
Jenkins Owasp Dependency Check	Version 1.0.7
Jenkins Owasp Dependency Check	Version 1.0.8
Jenkins Owasp Dependency Check	Version 1.1.0
Jenkins Owasp Dependency Check	Version 1.1.1.1
Jenkins Owasp Dependency Check	Version 1.1.1.2
Jenkins Owasp Dependency Check	Version 1.1.1
Jenkins Owasp Dependency Check	Version 1.1.2
Jenkins Owasp Dependency Check	Version 1.1.3
Jenkins Owasp Dependency Check	Version 1.1.4.1
Jenkins Owasp Dependency Check	Version 1.1.4
Jenkins Owasp Dependency Check	Version 1.2.0
Jenkins Owasp Dependency Check	Version 1.2.10
Jenkins Owasp Dependency Check	Version 1.2.11.1
Jenkins Owasp Dependency Check	Version 1.2.11
Jenkins Owasp Dependency Check	Version 1.2.1
Jenkins Owasp Dependency Check	Version 1.2.2
Jenkins Owasp Dependency Check	Version 1.2.3.1
Jenkins Owasp Dependency Check	Version 1.2.3.2
Jenkins Owasp Dependency Check	Version 1.2.3
Jenkins Owasp Dependency Check	Version 1.2.4
Jenkins Owasp Dependency Check	Version 1.2.5
Jenkins Owasp Dependency Check	Version 1.2.6
Jenkins Owasp Dependency Check	Version 1.2.7.1
Jenkins Owasp Dependency Check	Version 1.2.7
Jenkins Owasp Dependency Check	Version 1.2.8
Jenkins Owasp Dependency Check	Version 1.2.9
Jenkins Owasp Dependency Check	Version 1.3.0
Jenkins Owasp Dependency Check	Version 1.3.1.1
Jenkins Owasp Dependency Check	Version 1.3.1.2
Jenkins Owasp Dependency Check	Version 1.3.1
Jenkins Owasp Dependency Check	Version 1.3.2
Jenkins Owasp Dependency Check	Version 1.3.3
Jenkins Owasp Dependency Check	Version 1.3.4
Jenkins Owasp Dependency Check	Version 1.3.5
Jenkins Owasp Dependency Check	Version 1.3.6
Jenkins Owasp Dependency Check	Version 1.4.0
Jenkins Owasp Dependency Check	Version 1.4.1
Jenkins Owasp Dependency Check	Version 1.4.2
Jenkins Owasp Dependency Check	Version 1.4.3
Jenkins Owasp Dependency Check	Version 1.4.4
Jenkins Owasp Dependency Check	Version 1.4.5
Jenkins Owasp Dependency Check	Version 2.0.0
Jenkins Owasp Dependency Check	Version 2.0.1.1
Jenkins Owasp Dependency Check	Version 2.0.1