Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Jenkins Project
Jenkins

Jenkins Project Jenkins vulnerabilities

Known exploitedIn KEVPublic exploitFix available

jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin stored credentials in plain textCVE-2019-10348Fix available8.8 HighJuly 11, 2019
jenkins mashup portlets, jenkins project mashup portlets plugin +1 moreStored credentials unencrypted in Jenkins Mashup Portlets PluginCVE-2019-10347Fix available8.8 HighJuly 11, 2019
jenkins embeddable build status, jenkins project embeddable build status plugin +1 moreJenkins Embeddable Build Status Plugin contains Cross-site ScriptingCVE-2019-10346Fix available6.1 MediumJuly 11, 2019
jenkins docker, jenkins project docker plugin +1 moreMissing permission check in Jenkins Docker PluginCVE-2019-10342Fix available4.3 MediumJuly 11, 2019
jenkins docker, jenkins project docker plugin +1 moreMissing permission check in Jenkins Docker PluginCVE-2019-10341Fix available6.5 MediumJuly 11, 2019
jenkins docker, jenkins project docker plugin +1 moreJenkins Docker Plugin contains Cross-Site Request ForgeryCVE-2019-10340Fix available8.8 HighJuly 11, 2019
jenkins jx resources, jenkins project jx resources plugin +1 moreJenkins JX Resources Plugin missing permission checkCVE-2019-10339Fix available8.8 HighJune 11, 2019
jenkins jx resources, jenkins project jx resources plugin +1 moreJenkins JX Resources Plugin cross-site request forgery vulnerabilityCVE-2019-10338Fix available8.8 HighJune 11, 2019
jenkins token macro, jenkins project token macro plugin +1 moreImproper Restriction of XML External Entity Reference Jenkins Token Macro PluginCVE-2019-10337Fix available7.5 HighJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerabilityCVE-2019-10336Fix available6.1 MediumJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerabilityCVE-2019-10335Fix available5.4 MediumJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validationCVE-2019-10334Fix available6.5 MediumJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin Missing permission checksCVE-2019-10333Fix available4.3 MediumJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin missing permission checkCVE-2019-10332Fix available4.3 MediumJune 11, 2019
jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin cross-site request forgery vulnerabilityCVE-2019-10331Fix available4.3 MediumJune 11, 2019
gitea, jenkins project gitea plugin +1 moreImproper handling of untrusted branches in Gitea Jenkins PluginCVE-2019-10330Fix available7.5 HighMay 31, 2019
eficode influxdb, jenkins project influxdb plugin +1 morePlaintext password storage in Jenkins InfluxDB PluginCVE-2019-10329Fix available8.8 HighMay 31, 2019
jenkins pipeline remote loader, jenkins project pipeline remote loader plugin +1 moreUnsafe entry in Script Security list of approved signatures in Pipeline Remote Loader PluginCVE-2019-10328Fix available9.9 CriticalMay 31, 2019
jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreXML External Entity processing vulnerability in Pipeline Maven Integration Jenkins PluginCVE-2019-10327Fix available8.1 HighMay 31, 2019
jenkins project warnings ng plugin, jenkins warnings next generation +1 moreJenkins Warnings NG Plugin cross-site request forgery vulnerabilityCVE-2019-10326Fix available4.3 MediumMay 31, 2019
jenkins project warnings ng plugin, jenkins warnings next generation +1 moreJenkins Warnings NG Plugin Cross-site scripting vulnerabilityCVE-2019-10325Fix available5.4 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreCross-site request forgery vulnerability in Jenkins Artifactory PluginCVE-2019-10324Fix available6.5 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin missing permission checkCVE-2019-103234.3 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin missing permission checkCVE-2019-103224.3 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin cross-site request forgery vulnerabilityCVE-2019-103214.3 MediumMay 31, 2019
jenkins credentials, jenkins project credentials plugin +1 moreInsertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials PluginCVE-2019-10320Fix available4.3 MediumMay 21, 2019
jenkins project pam authentication plugin, jenkins pluggable authentication module +1 moreMissing permission check in Jenkins PAM Authentication PluginCVE-2019-10319Fix available4.3 MediumMay 21, 2019
jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin stored the client secret unencryptedCVE-2019-10318Fix available8.8 HighApril 30, 2019
jenkins sitemonitor, jenkins project sitemonitor plugin +1 moreJenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validationCVE-2019-10317Fix available5.9 MediumApril 30, 2019
jenkins aqua microscanner, jenkins project aqua microscanner plugin +1 moreJenkins Aqua MicroScanner Plugin stored credentials in plain textCVE-2019-10316Fix available8.8 HighApril 30, 2019
jenkins github authentication, jenkins project github authentication plugin +1 moreJenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerabilityCVE-2019-10315Fix available8.8 HighApril 30, 2019
jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validationCVE-2019-103145.9 MediumApril 30, 2019
jenkins twitter, jenkins project twitter plugin +1 moreJenkins Twitter Plugin stores credentials in plain textCVE-2019-103138.8 HighApril 30, 2019
jenkins ansible tower, jenkins project ansible tower plugin +1 moreMissing permission check in Jenkins Ansible Tower PluginCVE-2019-10312Fix available4.3 MediumApril 30, 2019
jenkins ansible tower, jenkins project ansible tower plugin +1 moreJenkins Ansible Tower Plugin missing permission checkCVE-2019-10311Fix available8.8 HighApril 30, 2019
jenkins ansible tower, jenkins project ansible tower plugin +1 moreJenkins Ansible Tower Plugin cross-site request forgery vulnerabilityCVE-2019-10310Fix available8.8 HighApril 30, 2019
jenkins project self-organizing swarm plug-in modules plugin, jenkins self-organizing swarm modules +1 moreJenkins Self-Organizing Swarm Plug-in Modules Plugin XXE vulnerability via UDP broadcast responseCVE-2019-103099.3 CriticalApril 30, 2019
jenkins static analysis utilities, jenkins project static analysis utilities plugin +1 moreMissing permission check in Jenkins Static Analysis Utilities PluginCVE-2019-10308Fix available6.5 MediumApril 30, 2019
jenkins static analysis utilities, jenkins project static analysis utilities plugin +1 moreJenkins Static Analysis Utilities Plugin is vulnerable to Cross-site request forgery vulnerabilityCVE-2019-10307Fix available6.5 MediumApril 30, 2019
jenkins ontrack, jenkins project ontrack plugin +1 moreSandbox bypass in ontrack Jenkins PluginCVE-2019-10306Fix available9.9 CriticalApril 18, 2019
jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy PluginCVE-2019-10305Fix available6.5 MediumApril 18, 2019
jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreJenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)CVE-2019-10304Fix available6.5 MediumApril 18, 2019
jenkins azure publishersettings credentials, jenkins project azure publishersettings credentials plugin +1 moreJenkins Azure PublisherSettings Credentials Plugin stored credentials in plain textCVE-2019-10303Fix available8.8 HighApril 18, 2019
jenkins jira-ext, jenkins project jira-ext plugin +1 moreJenkins jira-ext Plugin stores credentials unencryptedCVE-2019-10302Fix available8.8 HighApril 18, 2019
jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin missing permission checksCVE-2019-10301Fix available8.8 HighApril 18, 2019
jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin Cross-Site Request Forgery vulnerabilityCVE-2019-10300Fix available8.0 HighApril 18, 2019
jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-1003050Fix available5.4 MediumApril 10, 2019
jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreInsufficient Session Expiration in JenkinsCVE-2019-1003049Fix available8.1 HighApril 10, 2019
jenkins cloudcoreo deploytime, jenkins project cloudcoreo deploytime plugin +1 moreJenkins CloudCoreo DeployTime Plugin stores credentials in plain textCVE-2019-102998.8 HighApril 4, 2019
jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin stores credentials in plain textCVE-2019-102988.8 HighApril 4, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open