Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10394Fix available4.2 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security PluginCVE-2019-10393Fix available4.2 Medium
- jenkins git client, jenkins project git client plugin +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Git Client PluginCVE-2019-10392Public exploitFix availableEPSS 23.1%8.8 High
- jenkins ibm application security on cloud, jenkins project ibm application security on cloud plugin +1 moreJenkins IBM AppScan Plugin showed plain text password in job configuration form fieldsCVE-2019-10391Fix available6.5 Medium
- jenkins splunk, jenkins project splunk plugin +1 moreJenkins Splunk Plugin Sandbox BypassCVE-2019-10390Fix available8.8 High
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreCross-Site Request Forgery in JenkinsCVE-2019-10384Fix available8.8 High
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10383Fix available4.8 Medium
- jenkins relution enterprise appstore publisher, jenkins project relution enterprise appstore publisher plugin +1 moreMissing permission check in Jenkins Relution Enterprise Appstore Publisher PluginCVE-2019-103894.3 Medium
- jenkins relution enterprise appstore publisher, jenkins project relution enterprise appstore publisher plugin +1 moreRelution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request ForgeryCVE-2019-103884.3 Medium
- jenkins xl testview, jenkins project xl testview plugin +1 moreMissing permission check in Jenkins XL TestView PluginCVE-2019-103876.5 Medium
- jenkins xl testview, jenkins project xl testview plugin +1 moreCross-site request forgery vulnerability in Jenkins XL TestView PluginCVE-2019-103868.8 High
- jenkins eggplant, jenkins project eggplant plugin +1 moreJenkins eggplant-plugin Plugin stores credentials in plain textCVE-2019-103856.5 Medium
- jenkins vmware lab manager slaves, jenkins project vmware lab manager slaves plugin +1 moreJenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate ValidationCVE-2019-103826.5 Medium
- jenkins codefresh integration, jenkins project codefresh integration plugin +1 moreJenkins Codefresh Integration Plugin Improper Certificate Validation vulnerabilityCVE-2019-103817.5 High
- jenkins simple travis pipeline runner, jenkins project simple travis pipeline runner plugin +1 moreJenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerabilityCVE-2019-103808.8 High
- google cloud messaging notification, jenkins project google cloud messaging notification plugin +1 moreJenkins Google Cloud Messaging Notification Plugin stores credentials in plain textCVE-2019-103796.5 Medium
- jenkins testlink, jenkins project testlink plugin +1 moreJenkins TestLink Plugin stores credentials in plain textCVE-2019-103785.3 Medium
- jenkins avatar, jenkins project avatar plugin +1 moreMissing permission check in Jenkins Avatar PluginCVE-2019-10377Fix available4.3 Medium
- jenkins wall display, jenkins project wall display plugin +1 moreJenkins Wall Display Plugin Cross-site Scripting vulnerabilityCVE-2019-103766.1 Medium
- jenkins file system scm, jenkins project file system scm plugin +1 moreArbitrary file read vulnerability in Jenkins File System SCM PluginCVE-2019-103756.5 Medium
- jenkins pegdown formatter, jenkins project pegdown formatter plugin +1 moreJenkins PegDown Formatter Plugin has Cross-site Scripting vulnerabilityCVE-2019-103745.4 Medium
- jenkins build pipeline, jenkins project build pipeline plugin +1 moreJenkins Build Pipeline Plugin vulnerable to Cross-site ScriptingCVE-2019-103735.4 Medium
- jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin Open Redirect vulnerabilityCVE-2019-10372Fix available6.1 Medium
- jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin vulnerable to Session FixationCVE-2019-10371Fix available7.5 High
- jenkins mask passwords, jenkins project mask passwords plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Mask Passwords PluginCVE-2019-10370Fix available6.5 Medium
- jenkins jclouds, jenkins project jclouds plugin +1 moreJenkins JClouds Plugin missing permission checkCVE-2019-10369Fix available6.5 Medium
- jenkins jclouds, jenkins project jclouds plugin +1 moreJenkins JClouds Plugin cross-site request forgery vulnerabilityCVE-2019-10368Fix available8.8 High
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Configuration as Code PluginCVE-2019-10367Fix available5.5 Medium
- jenkins skytap cloud ci, jenkins project skytap cloud ci plugin +1 moreSkytap Cloud CI Plugin stored credentials in plain textCVE-2019-10366Fix available6.5 Medium
- google kubernetes engine, jenkins project google kubernetes engine plugin +1 moreJenkins Google Kubernetes Engine Plugin vulnerable to Exposure of Resource to Wrong SphereCVE-2019-10365Fix available4.3 Medium
- jenkins ec2, jenkins project amazon ec2 plugin +1 moreJenkins Amazon EC2 Plugin leaked beginning of private key in system logCVE-2019-10364Fix available5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreCleartext Transmission of Sensitive Information in Jenkins Configuration as Code PluginCVE-2019-10363Fix available4.9 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreImproper Encoding or Escaping of Output in Jenkins Configuration as Code PluginCVE-2019-10362Fix available5.4 Medium
- jenkins project maven release plugin, jenkins m2release +1 moreJenkins Maven Release Plug-in Plugin stored credentials in plain textCVE-2019-10361Fix available5.5 Medium
- jenkins project maven release plugin, jenkins m2 release +1 moreJenkins Maven Release Plugin vulnerable to Cross-site ScriptingCVE-2019-10360Fix available5.4 Medium
- jenkins m2release, jenkins project maven release plugin +1 moreJenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerabilityCVE-2019-10359Fix available6.3 Medium
- jenkins maven, jenkins project maven integration plugin +1 moreMaven Integration Plugin did not mask sensitive values in module build logsCVE-2019-10358Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\, redhat openshift container platform +2 moreMissing Authorization in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2019-10357Fix available4.3 Medium
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreReturn of Pointer Value Outside of Expected Rang in Jenkins Script Security PluginCVE-2019-10356Fix available8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreIncorrect Privilege Assignment in Jenkins Script Security PluginCVE-2019-10355Fix available8.8 High
- jenkins configuration as code, jenkins project configuration as code plugin +1 morePlaintext Storage of a Password in Jenkins Configuration as Code PluginCVE-2019-10345Fix available5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreMissing Authorization in Jenkins Configuration as Code PluginCVE-2019-10344Fix available4.3 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Configuration as Code PluginCVE-2019-10343Fix available3.3 Low
- jenkins credentials binding, jenkins credentials binding plugin jenkins +1 moreJenkins Credentials Binding Plugin Stores Passwords in a Recoverable FormatCVE-2019-10102416.5 Medium
- jenkins, redhat openshift container platform +1 moreMissing Authorization in JenkinsCVE-2019-10354Fix available4.3 Medium
- jenkinsCross-Site Request Forgery in JenkinsCVE-2019-10353Fix available7.5 High
- jenkinsImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2019-10352Fix availableEPSS 10.0%6.5 Medium
- jenkins caliper ci, jenkins project caliper ci plugin +1 moreJenkins Caliper CI Plugin stores credentials in plain textCVE-2019-103518.8 High
- jenkins port allocator, jenkins project port allocator plugin +1 moreJenkins Port Allocator Plugin stores credentials in plain textCVE-2019-103508.8 High
- jenkins dependency graph viewer, jenkins project dependency graph viewer plugin +1 moreJenkins Dependency Graph Viewer Plugin contains Cross-site ScriptingCVE-2019-10349Public exploitFix available5.4 Medium
- Show moreLoading…