Jenkins Project Jenkins Performance Plugin vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Performance Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5MediumCVE-2021-21701jenkins project · jenkins performance plugin +2 morejenkins project jenkins performance pluginJenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS1.73%8.8HighCVE-2026-84670jenkins project · jenkins performance pluginjenkins project jenkins performance pluginJenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.EPSS0.64%