Maven com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

Name: Maven com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
Brand: Maven

productUS

pkg:maven/com.sonyericsson.jenkins.plugins.bfa/build-failure-analyzer

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high7medium1low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-4988US	medium6.1	1.23% (69th)	—	1.16.0	2017-02-09	< 1.16.0
CVE-2019-16555US	medium6.5	1.08% (65th)	—	1.24.2	2019-12-17	< 1.24.2
CVE-2013-6374US	low3.5	0.97% (62nd)	—	1.5.1	2013-11-25	< 1.5.1
CVE-2019-16554US	medium4.3OT elevated	0.82% (57th)	—	1.24.2	2019-12-17	< 1.24.2
CVE-2020-2244US	medium5.4	0.75% (55th)	—	1.27.1	2020-09-01	< 1.27.1
CVE-2019-16553US	high8.8	0.69% (53rd)	—	1.24.2	2019-12-17	< 1.24.2
CVE-2023-43501US	medium6.5OT elevated	0.61% (49th)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43499US	medium5.4	0.60% (49th)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43500US	high8.8	0.47% (41st)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43502US	medium4.3	0.39% (33rd)	—	2.4.2	2023-09-20	< 2.4.2

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.