Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Jenkins Project
Jenkins

Jenkins Project Jenkins vulnerabilities

Known exploitedIn KEVPublic exploitFix available

jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreCross-Site Request Forgery in Jenkins Gerrit Trigger PluginCVE-2019-16551Fix available8.8 HighDecember 17, 2019
jenkins maven, jenkins project maven release plugin +1 moreCross-site request forgery (CSRF) vulnerability in Jenkins Maven Release PluginCVE-2019-16550Fix available8.8 HighDecember 17, 2019
jenkins maven, jenkins project maven release plugin +1 moreJenkins Maven Release Plug-in Plugin XXE vulnerabilityCVE-2019-16549Fix available8.1 HighDecember 17, 2019
jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerabilityCVE-2019-16548Fix available8.8 HighNovember 21, 2019
jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin Missing Authorization vulnerabilityCVE-2019-16547Fix available4.3 MediumNovember 21, 2019
jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the pluginCVE-2019-16546Fix available5.9 MediumNovember 21, 2019
jenkins project qmetry for jira - test management plugin, qmetry jenkins qmetry for jira +1 moreJenkins QMetry for JIRA Plugin shows plain text password in configuration formCVE-2019-16545Fix available6.5 MediumNovember 21, 2019
jenkins project qmetry for jira - test management plugin, qmetry jenkins qmetry for jira +1 moreJenkins QMetry for JIRA Plugin stored credentials in plain textCVE-2019-16544Fix available8.8 HighNovember 21, 2019
jenkins spira importer, jenkins project spira importer plugin +1 morePlaintext Storage in Jenkins Spira Importer PluginCVE-2019-16543Fix available5.5 MediumNovember 21, 2019
jenkins anchore container image scanner, jenkins project anchore container image scanner plugin +1 moreJenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected CredentialsCVE-2019-16542Fix available6.5 MediumNovember 21, 2019
jenkins jira, jenkins project jira plugin +1 moreJenkins JIRA Plugin allows users to select and use credentials with System scopeCVE-2019-16541Fix available9.9 CriticalNovember 21, 2019
jenkins support core, jenkins project support core plugin +1 moreJenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary filesCVE-2019-16540Fix available6.5 MediumNovember 21, 2019
jenkins support core, jenkins project support core plugin +1 moreMissing permission check in Jenkins Support Core PluginCVE-2019-16539Fix available6.5 MediumNovember 21, 2019
jenkins script security, jenkins project script security plugin +1 moreIncorrect Authorization in Jenkins Script Security PluginCVE-2019-16538Fix available8.8 HighNovember 21, 2019
jenkinsJenkins CI Game Plugin allows Cross-Site Scripting (XSS)CVE-2012-4441Fix available6.1 MediumNovember 18, 2019
jenkinsJenkins Violation Plugin allows Cross-Site Scripting (XSS)CVE-2012-4440Fix available6.1 MediumNovember 18, 2019
jenkinsJenkins allows Cross-Site Scripting (XSS) via Crafted URLCVE-2012-4439Fix available6.1 MediumNovember 18, 2019
jenkinsJenkins allows Data Insertion and Execution of Code by those with Read and HTTP AccessCVE-2012-4438Fix available8.8 HighNovember 18, 2019
jenkins zulip, jenkins project zulip plugin +1 moreJenkins Zulip Plugin vulnerable to Insufficiently Protected CredentialsCVE-2019-10476Fix available7.8 HighOctober 23, 2019
jenkins build-metrics, jenkins project build-metrics plugin +1 moreJenkins build-metrics Plugin reflected cross-site scripting vulnerabilityCVE-2019-10475Public exploitEPSS 57.7%6.1 MediumOctober 23, 2019
jenkins global post script, jenkins project global post script plugin +1 moreJenkins Global Post Script Plugin missing permission checkCVE-2019-104744.3 MediumOctober 23, 2019
jenkins libvirt slaves, jenkins project libvirt slaves plugin +1 moreJenkins Libvirt Slaves Plugin vlnerable to Credential EnumerationCVE-2019-10473Fix available4.3 MediumOctober 23, 2019
jenkins libvirt slaves, jenkins project libvirt slaves plugin +1 moreJenkins Libvirt Slaves Plugin vlnerable to Incorrect Default PermissionsCVE-2019-10472Fix available6.5 MediumOctober 23, 2019
jenkins libvirt slaves, jenkins project libvirt slaves plugin +1 moreJenkins Libvirt Slaves Plugin vlnerable to Cross-Site Request ForgeryCVE-2019-10471Fix available8.8 HighOctober 23, 2019
jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreJenkins Kubernetes CI/CD Plugin vulnerable to Credential EnumerationCVE-2019-104706.5 MediumOctober 23, 2019
jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreJenkins Kubernetes CI/CD Plugin vulnerable to Improper AuthorizationCVE-2019-104696.5 MediumOctober 23, 2019
jenkins kubernetes ci, jenkins project elasticbox jenkins kubernetes ci/cd plugin +1 moreJenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-104688.8 HighOctober 23, 2019
jenkins sonar gerrit, jenkins project sonar gerrit plugin +1 moreJenkins Sonar Gerrit Plugin stores credentials unencryptedCVE-2019-10467Fix available6.5 MediumOctober 23, 2019
jenkins 360 fireline, jenkins project 360 fireline plugin +1 moreJenkins 360 FireLine Plugin vulnerable to XML External Entity ReferenceCVE-2019-104668.1 HighOctober 23, 2019
jenkins deploy weblogic, jenkins project deploy weblogic plugin +1 moreJenkins Deploy WebLogic Plugin missing permission checkCVE-2019-104654.3 MediumOctober 23, 2019
jenkins deploy weblogic, jenkins project deploy weblogic plugin +1 moreJenkins Deploy WebLogic Plugin cross-site request forgery vulnerabilityCVE-2019-104648.8 HighOctober 23, 2019
jenkins dynatrace application monitoring, jenkins project dynatrace application monitoring plugin +1 moreJenkins Dynatrace Plugin contains Incorrect Default PermissionsCVE-2019-10463Fix available6.5 MediumOctober 23, 2019
jenkins dynatrace application monitoring, jenkins project dynatrace application monitoring plugin +1 moreJenkins Dynatrace Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-10462Fix available8.1 HighOctober 23, 2019
jenkins dynatrace application monitoring, jenkins project dynatrace application monitoring plugin +1 moreJenkins Dynatrace Plugin vulnerable to Insufficiently Protected CredentialsCVE-2019-10461Fix available7.8 HighOctober 23, 2019
jenkins bitbucket oauth, jenkins project bitbucket oauth plugin +1 moreJenkins Bitbucket OAuth Plugin contains Insufficiently Protected CredentialsCVE-2019-10460Fix available7.8 HighOctober 23, 2019
jenkins mattermost notification, jenkins project mattermost notification plugin +1 moreJenkins Mattermost Notification Plugin contains unencrypted storage of secret tokenCVE-2019-10459Fix available6.5 MediumOctober 23, 2019
jenkins puppet enterprise pipelineIncorrect Authorization in Puppet Enterprise Pipeline Jenkins PluginCVE-2019-104589.9 CriticalOctober 16, 2019
jenkins oracle cloud infrastructure compute classic, jenkins project oracle cloud infrastructure compute classic plugin +1 moreMissing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic PluginCVE-2019-104574.3 MediumOctober 16, 2019
jenkins oracle cloud infrastructure compute classic, jenkins project oracle cloud infrastructure compute classic plugin +1 moreJenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerabilityCVE-2019-104564.3 MediumOctober 16, 2019
jenkins rundeck, jenkins project rundeck plugin +1 moreMissing permission check in Jenkins Rundeck PluginCVE-2019-10455Fix available4.3 MediumOctober 16, 2019
jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin CSRF vulnerabilityCVE-2019-10454Fix available4.3 MediumOctober 16, 2019
jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin vulnerable to Cleartext credential storageCVE-2019-104537.8 HighOctober 16, 2019
jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreJenkins View26 Test-Reporting Plugin stores access token in plain textCVE-2019-104524.3 MediumOctober 16, 2019
jenkins soasta cloudtest, jenkins project soasta cloudtest plugin +1 moreJenkins SOASTA CloudTest Plugin stores API token in plain textCVE-2019-104514.3 MediumOctober 16, 2019
jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreCleartext Storage of Sensitive Information in Jenkins ElasticBox CI PluginCVE-2019-104503.3 LowOctober 16, 2019
jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreJenkins Fortify on Demand Plugin stores credentials in plain textCVE-2019-10449Fix available8.8 HighOctober 16, 2019
jenkins extensive testing, jenkins project extensive testing plugin +1 moreCleartext Storage of Sensitive Information in Jenkins Extensive Testing PluginCVE-2019-104488.8 HighOctober 16, 2019
jenkins sofy.ai, jenkins project sofy.ai plugin +1 moreJenkins Sofy.AI Plugin stores API token in plain textCVE-2019-104474.3 MediumOctober 16, 2019
jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin disables SSL/TLS and hostname verificationCVE-2019-10446Fix available8.2 HighOctober 16, 2019
jenkins google kubernetes engine, jenkins project google kubernetes engine plugin +1 moreMissing permission checks in Google Kubernetes Engine Jenkins PluginCVE-2019-10445Fix available4.3 MediumOctober 16, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open