HIGH
CVE-2026-70448
CVSS
7.1
Description
Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.
Weakness (CWE)
CWE-611
XML External Entity (XXE)
EPSS Score
0.19%
Probability of exploitation in next 30 days
9.4th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.