CVE-2018-1000198

MEDIUM · CVSS 6.5 EPSS 0.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-1000198

Severity

MEDIUM

CVSS

6.5

EPSS

0.95%

Jenkins Java

Original NVD Description

A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.