CVE-2019-10446

8.2 highEPSS 1.0%

High (8.2) in jenkins cadence vmanager. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:vmanager-plugin 2.7.1.

Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Severity

8.2 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2019-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-5j9f-5wmp-7f8h	Maven	org.jenkins-ci.plugins:vmanager-plugin	<2.7.1	2.7.1