Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin showed plain text client secret in configuration formCVE-2019-1003018Fix available4.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin CSRF vulnerabilityCVE-2019-1003017Fix available5.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin vulnerable to exposure of sensitive informationCVE-2019-1003016Fix available8.8 High
- jenkins job import, jenkins project job import plugin +1 moreXXE vulnerability in Jenkins Job Import PluginCVE-2019-1003015Fix available9.1 Critical
- jenkins config file provider, jenkins project config file provider plugin, redhat openshift container platform +2 moreJenkins Config File Provider Plugin XSS vulnerabilityCVE-2019-1003014Fix available4.8 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-site Scripting in Jenkins Blue Ocean PluginCVE-2019-1003013Fix available5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-Site Request Forgery in Jenkins Blue Ocean PluginCVE-2019-1003012Fix available6.5 Medium
- jenkins token macro, jenkins project token macro plugin, redhat openshift container platform +2 moreJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoSCVE-2019-1003011Fix available8.1 High
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin Improper certificate validation with StartTLSCVE-2019-1003009Fix available7.4 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreJenkins Warnings Next Generation Plugin cross-site request forgery vulnerabilityCVE-2019-10030088.8 High
- jenkins warnings, jenkins project warnings plugin +1 moreSandbox Bypass via CSRF in Jenkins Warnings PluginCVE-2019-1003007Fix available8.8 High
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003006Fix available8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox Bypass in Script Security PluginCVE-2019-1003005Public exploitFix availableEPSS 19.5%8.8 High
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003004Fix available7.2 High
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003003Fix available7.2 High
- jenkins distributed fork, jenkins project distfork jenkins plugin +1 moreMissing permission checks in Jenkins Distributed Fork PluginCVE-2017-2652Fix available8.8 High
- jenkins pipeline classpath step, jenkins project pipeline: classpath step jenkins plugin +1 moreJenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypassCVE-2017-26508.5 High
- jenkins active directory, jenkins project active directory jenkins plugin +1 moreJenkins Active Directory Plugin did not verify certificate of AD serverCVE-2017-2649Fix available8.1 High
- [unknown] jenkinsInadequate Encryption Strength in JenkinsCVE-2017-2598Fix available4.3 Medium
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2609Fix available4.3 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2017-2607Fix available4.2 Medium
- [unknown] jenkinsCross-Site Request Forgery in JenkinsCVE-2017-2613Fix available5.4 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2017-2610Fix available5.4 Medium
- [unknown] jenkinsImproper Authentication in JenkinsCVE-2017-2604Fix available4.3 Medium
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2603Fix available2.6 Low
- [unknown] jenkinsIncomplete List of Disallowed Inputs in JenkinsCVE-2017-2602Fix available3.1 Low
- [unknown] jenkinsIncorrect Permission Assignment for Critical Resource in JenkinsCVE-2017-2612Fix available5.4 Medium
- [unknown] jenkinsDeserialization of Untrusted Data in JenkinsCVE-2017-2608Fix available8.8 High
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2600Fix available4.3 Medium
- jenkinsCross-site Scripting in JenkinsCVE-2017-2601Fix available6.1 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2606Fix available4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2017-2611Fix available4.3 Medium
- [unknown] jenkinsIncorrect Authorization in JenkinsCVE-2017-2599Fix available5.4 Medium