Every CVE whose affected-product data names Jenkins Octopusdeploy, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2019-1003071 — CVSS 8.8 (high): Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed…
CVE-2019-1003027 — CVSS 4.3 (medium): A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that…