{"id":"CVE-2022-29036","aliases":["EUVD-2022-1827","GHSA-rvg5-f5fj-mxvg","RHSA-2022:0871","RHSA-2022:1600","RHSA-2022:2205","RHSA-2022:2280","RHSA-2022:4909","RHSA-2022:4947"],"status":"published","title":"Cross-site Scripting in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.71926,"percentile":0.99431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2022-04-12T00:00:00Z","modified":"2026-10-24T14:31:48Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","fixed_in":["2.6.1.1","1074.1076.v39c30cecb_0e2","1087.1089.v2f1b_9a_b_040e4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.6.1"},{"fixed":"2.6.1.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.2"},{"last_affected":"1074.v60e6c29b"},{"fixed":"1074.1076.v39c30cecb_0e2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1087.v16065d268466"},{"last_affected":"1087.v16065d268466"},{"fixed":"1087.1089.v2f1b_9a_b_040e4"}]}],"versions":["1087.v16065d268466"]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1105"},{"last_affected":"1111.v35a"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1.1"}]}],"versions":["1.0","1.1","1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.16.1","1.17","1.18","1.19","1.2","1.20","1.21","1.22","1.23","1.24","1.25","1.26","1.27","1.28","1.3","1.3.1","1.4","1.5","1.6","1.7","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.8","1.8.1","1.8.2","1.8.3","1.8.4","1.9","1.9.1","1.9.2","1.9.3","1.9.4","2.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.14","2.1.15","2.1.16","2.1.17","2.1.18","2.1.19","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9","2.2.0","2.2.1","2.3.0","2.3.0.1","2.3.1","2.3.10","2.3.11","2.3.12","2.3.13","2.3.13.1","2.3.14","2.3.14.1","2.3.15","2.3.15.1","2.3.17","2.3.18","2.3.19","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.7.1","2.3.8","2.3.9","2.4","2.4.0.1","2.4.1","2.5","2.6","2.6.1"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.2"},{"fixed":"1074.1076.v39c30cecb_0e2"}]}],"versions":["1055.v1346ba467ba1","1061.vb_1fceb_58fa_18","1074.v60e6c29b_b_44b_","2.6.2"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1087.v16065d268466"},{"fixed":"1087.1089.v2f1b_9a_b_040e4"}]}],"versions":["1087.v16065d268466"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1105"},{"last_affected":"1111.v35a"}]}],"versions":["1105.vb_4e24a_c78b_81"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1646993358-1.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.2-8.rhaos4.10.git8ad5d25.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.2-8.rhaos4.10.git8ad5d25.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.2-8.rhaos4.10.git8ad5d25.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1650890594-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.1651754460-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.705-1.g0fa231c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1650628887-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1652967082-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.21-3.rhaos4.6.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.7-2.rhaos4.6.git3c20b65.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.7-2.rhaos4.6.git3c20b65.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.21-3.rhaos4.6.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.7-2.rhaos4.6.git3c20b65.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.7-2.rhaos4.6.git3c20b65.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.7-2.rhaos4.6.git3c20b65.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1653312933-1.el8"}]}],"bundled":3}],"products":[{"vendor":"jenkins","product":"credentials"},{"vendor":"jenkins project","product":"jenkins credentials plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617","tags":["x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29036","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rvg5-f5fj-mxvg"},{"url":"https://access.redhat.com/errata/RHSA-2022:0871","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064010","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0871.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0811","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25173","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25174","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25176","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055789","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25178","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25179","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25181","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25183","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25184","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29036","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-04-12/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29046","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1600","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079307","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1600.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27652","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074850","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29041","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2205","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074855","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2205.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29047","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2280","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071682","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2280.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21698","tags":["advisory"]},{"url":"https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4909","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4909.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4947","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085361","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4947.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1708","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2022-29036","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-12T00:00:00Z","modified":"2024-08-03T06:10:58.182Z","updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-1827","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-12T00:00:00Z","modified":"2024-08-03T06:10:58Z","updated_at":"2026-11-03T03:25:39.28463Z"}],"ghsa":[{"id":"GHSA-rvg5-f5fj-mxvg","title":"Cross-site Scripting in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-13T00:00:18Z","modified":"2023-01-27T05:01:43Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:36:16.28305Z"}],"nvd":[{"id":"CVE-2022-29036","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-12T20:15:09.08Z","modified":"2026-06-17T04:39:28.927Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:15.414503Z"}],"osv":[{"id":"CVE-2022-29036","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-12T20:15:09.08Z","modified":"2026-10-24T14:31:48.667749663Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"GHSA-rvg5-f5fj-mxvg","title":"Cross-site Scripting in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.","status":"published","published":"2022-04-13T00:00:18Z","modified":"2023-11-08T04:09:06.726833Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:56.281047Z"},{"id":"RHSA-2022:0871","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update","status":"published","published":"2024-09-16T07:39:57Z","modified":"2026-03-21T10:30:36.327177Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1600","title":"Red Hat Security Advisory: OpenShift Container Platform 4.10.12 security update","status":"published","published":"2024-09-16T07:57:12Z","modified":"2025-11-22T12:32:49Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2205","title":"Red Hat Security Advisory: OpenShift Container Platform 4.9.33 packages and security update","status":"published","published":"2024-09-16T08:08:17Z","modified":"2025-11-22T12:34:00Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2280","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11.705 security update","status":"published","published":"2024-09-30T14:21:20Z","modified":"2026-10-17T10:01:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4909","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.52 paackages and security update","status":"published","published":"2024-09-16T08:08:26Z","modified":"2025-11-22T12:35:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4947","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.59 security update","status":"published","published":"2024-09-16T07:40:02Z","modified":"2026-04-28T10:02:24Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"}]}}