Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)CVE-2020-2112Fix available5.4 Medium
- jenkins subversion, jenkins project subversion plugin +1 moreSubversion Plugin stored XSS vulnerabilityCVE-2020-2111Fix available5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreImproper Input Validation in Jenkins Script Security PluginCVE-2020-2110Fix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Input Validation in Jenkins Pipeline: Groovy PluginCVE-2020-2109Fix available8.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreXXE vulnerability in Jenkins WebSphere Deployer PluginCVE-2020-21087.6 High
- jenkins fortify, jenkins project fortify plugin +1 moreFortify Plugin stored credentials in plain textCVE-2020-2107Fix available4.3 Medium
- jenkins code coverage api, jenkins project code coverage api plugin +1 moreStored XSS vulnerability in Code Coverage API PluginCVE-2020-2106Fix available5.4 Medium
- jenkinsJenkins REST APIs vulnerable to clickjackingCVE-2020-2105Fix available5.4 Medium
- jenkinsMemory usage graphs accessible to anyone with Overall/ReadCVE-2020-2104Fix available4.3 Medium
- jenkinsJenkins Diagnostic page exposed session cookiesCVE-2020-2103Fix available5.4 Medium
- jenkinsNon-constant time HMAC comparisonCVE-2020-2102Fix available5.3 Medium
- jenkinsNon-constant time comparison of inbound TCP agent connection secretCVE-2020-2101Fix available5.3 Medium
- jenkinsJenkins vulnerable to UDP amplification reflection attackCVE-2020-2100Fix available5.8 Medium
- jenkinsInbound TCP Agent Protocol/3 authentication bypass in JenkinsCVE-2020-2099Fix available8.6 High
- cloudbees jenkins, jenkins cloudbees, cloudbees jenkins lts +2 moreXML external entity (XXE) vulnerability in JenkinsCVE-2015-1811Fix available7.5 High
- cloudbees jenkins, jenkins cloudbees, cloudbees jenkins lts +2 moreXML external entity (XXE) vulnerability in JenkinsCVE-2015-1809Fix available7.5 High
- jenkins sounds, jenkins project sounds plugin +1 moreCSRF vulnerability in Jenkins Sounds Plugin allow OS command executionCVE-2020-2098Fix available8.8 High
- jenkins sounds, jenkins project sounds plugin +1 moreMissing permission checks in Jenkins Sounds Plugin allow OS command executionCVE-2020-2097Fix available8.8 High
- jenkins gitlab hook, jenkins project gitlab hook plugin +1 moreReflected XSS vulnerability in Jenkins gitlab-hook PluginCVE-2020-2096Public exploitEPSS 93.2%6.1 Medium
- jenkins redgate sql change automation, jenkins project redgate sql change automation plugin +1 moreRedgate SQL Change Automation Plugin stored credentials in plain textCVE-2020-2095Fix available4.3 Medium
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreMissing permission checks in Health Advisor by CloudBees PluginCVE-2020-2094Fix available4.3 Medium
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreCSRF vulnerability in Health Advisor by CloudBees PluginCVE-2020-2093Fix available8.8 High
- jenkins robot framework, jenkins project robot framework plugin +1 moreXXE vulnerability in Jenkins Robot Framework PluginCVE-2020-2092Fix available8.8 High
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreCSRF vulnerability in Jenkins Amazon EC2 PluginCVE-2020-2090Fix available8.8 High
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreMissing permission checks in Jenkins Amazon EC2 PluginCVE-2020-2091Fix available8.1 High
- jenkins project alauda kubernetes suport plugin, jenkins alauda kubernetes support +1 moreImproper Authorization in Jenkins Alauda Kubernetes Suport PluginCVE-2019-165766.5 Medium
- jenkins project alauda kubernetes suport plugin, jenkins alauda kubernetes support +1 moreCross-Site Request Forgery in Jenkins Alauda Kubernetes Suport PluginCVE-2019-165758.8 High
- jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 moreJenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in JenkinsCVE-2019-165746.5 Medium
- jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 moreJenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgeryCVE-2019-165738.8 High
- jenkins weibo, jenkins project weibo plugin +1 moreJenkins Weibo Plugin stores credentials unencrypted in its global configuration fileCVE-2019-165725.5 Medium
- jenkins rapiddeploy, jenkins project rapiddeploy plugin +1 moreJenkins RapidDeploy Plugin missing permission checkCVE-2019-165714.3 Medium
- jenkins rapiddeploy, jenkins project rapiddeploy plugin +1 moreJenkins RapidDeploy Plugin Cross-Site Request Forgery pluginCVE-2019-165708.8 High
- jenkins mantis, jenkins project mantis plugin +1 moreCSRF vulnerability in Jenkins Mantis PluginCVE-2019-165694.3 Medium
- jenkins sctmexecutor, jenkins project sctmexecutor plugin +1 moreJenkins SCTMExecutor Plugin stores credentials in plain textCVE-2019-165685.3 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin missing permission checkCVE-2019-165674.3 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin missing permission checkCVE-2019-165666.5 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin cross-site request forgery vulnerabilityCVE-2019-165658.8 High
- jenkins pipeline aggregator view, jenkins project pipeline aggregator view plugin +1 moreJenkins Pipeline Aggregator View Plugin stored XSS vulnerabilityCVE-2019-16564Fix available5.4 Medium
- jenkins mission control, jenkins project mission control plugin +1 moreCross site scripting in Jenkins Mission Control PluginCVE-2019-165635.4 Medium
- jenkins buildgraph-view, jenkins project buildgraph-view plugin +1 moreJenkins buildgraph-view Plugin vulnerable to stored Cross-site ScriptingCVE-2019-165625.4 Medium
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreSSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer PluginCVE-2019-165617.1 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreCross-site request forgery vulnerability in Jenkins WebSphere Deployer PluginCVE-2019-165608.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin missing permission checkCVE-2019-165595.4 Medium
- jenkins spira importer, jenkins project spira importer plugin +1 moreImproper Certificate Validation in Jenkins Spira Importer PluginCVE-2019-16558Fix available8.2 High
- jenkins redgate sql change automation, jenkins project redgate sql change automation plugin +1 moreJenkins Redgate SQL Change Automation Plugin has Insufficiently Protected CredentialsCVE-2019-16557Fix available6.5 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin stored credentials in plain textCVE-2019-16556Fix available6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreInefficient Regular Expression Complexity in Jenkins Build Failure Analyzer PluginCVE-2019-16555Fix available6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreMissing permission check in Jenkins Build Failure Analyzer PluginCVE-2019-16554Fix available4.3 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreCross-Site Request Forgery in Jenkins Build Failure Analyzer PluginCVE-2019-16553Fix available8.8 High
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreMissing permission check in Jenkins Gerrit Trigger PluginCVE-2019-16552Fix available5.4 Medium
- Show moreLoading…