CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It affects Jenkins.
CVE
CVE-2025-64134
Severity
HIGH
CVSS
7.1
EPSS
0.33%
Jenkins
Original NVD Description
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)