Security Advisory

CVE-2026-70440

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-05 17:40:36

Last updated 2026-08-05 19:15:58

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

← Browse all CVEs View on cve.org ↗