Skip to contentJenkins Project Jenkins vulnerabilities
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2020-2161Fix available5.4 Medium
- jenkinsCross-Site Request Forgery in JenkinsCVE-2020-2160Fix available8.8 High
- jenkins cryptomove, jenkins project cryptomove plugin +1 moreOS command injection in CryptoMove PluginCVE-2020-21598.8 High
- jenkins literate, jenkins project literate plugin +1 moreRemote Code Execution vulnerability in Jenkins Literate PluginCVE-2020-21588.8 High
- jenkins skytap cloud ci, jenkins project skytap cloud ci plugin +1 moreCredentials transmitted in plain text by Skytap Cloud CI PluginCVE-2020-21574.3 Medium
- jenkins deployhub, jenkins project deployhub plugin +1 moreCredentials transmitted in plain text by Jenkins DeployHub PluginCVE-2020-21564.3 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCredentials transmitted in plain text by OpenShift Deployer PluginCVE-2020-21555.3 Medium
- jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreJenkins Zephyr for JIRA Test Management Plugin stores credentials in plain textCVE-2020-21545.5 Medium
- jenkins backlog, jenkins project backlog plugin +1 moreCredentials transmitted in plain text by Backlog PluginCVE-2020-2153Fix available4.3 Medium
- jenkins subversion release manager, jenkins project subversion release manager plugin +1 moreJenkins Subversion Release Manager Plugin vulnerable to cross-site scripting (XSS)CVE-2020-21526.1 Medium
- jenkins quality gates, jenkins project quality gates plugin +1 moreJenkins Quality Gates Plugin transmits credentials in plain text during configurationCVE-2020-21515.3 Medium
- jenkins sonar quality gates, jenkins project sonar quality gates plugin +1 moreJenkins Sonar Quality Gates Plugin transmits credentials in plain text during configurationCVE-2020-21505.3 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreCredentials transmitted in plain text by Repository Connector PluginCVE-2020-2149Fix available5.3 Medium
- jenkins mac, jenkins project mac plugin +1 moreMissing permission checks in Mac PluginCVE-2020-2148Fix available4.3 Medium
- jenkins mac, jenkins project mac plugin +1 moreCSRF vulnerability in Mac PluginCVE-2020-2147Fix available4.3 Medium
- jenkins mac, jenkins project mac plugin +1 moreMissing SSH host key validation in Mac PluginCVE-2020-2146Fix available7.4 High
- jenkins zephyr enterprise test management, jenkins project zephyr enterprise test management plugin +1 moreCredentials stored in plain text by Zephyr Enterprise Test Management PluginCVE-2020-2145Fix available5.5 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreXXE vulnerability in Rundeck PluginCVE-2020-2144Fix available7.1 High
- jenkins logstash, jenkins project logstash plugin +1 moreCredentials transmitted in plain text by Jenkins Logstash PluginCVE-2020-2143Fix available5.3 Medium
- jenkins p4, jenkins project p4 plugin +1 moreMissing permission checks in Jenkins P4 PluginCVE-2020-2142Fix available4.3 Medium
- jenkins p4, jenkins project p4 plugin +1 moreCSRF vulnerability in Jenkins P4 PluginCVE-2020-2141Fix available4.3 Medium
- jenkins audit trail, jenkins project audit trail plugin +1 moreXSS vulnerability in Jenkins Audit Trail PluginCVE-2020-2140Fix availableEPSS 76.0%6.1 Medium
- jenkins cobertura, jenkins project cobertura plugin +1 moreArbitrary file write vulnerability in Jenkins Cobertura PluginCVE-2020-2139Fix available6.5 Medium
- jenkins cobertura, jenkins project cobertura plugin +1 moreXXE vulnerability in Jenkins Cobertura PluginCVE-2020-2138Fix available7.1 High
- jenkins timestamper, jenkins project timestamper plugin +1 moreStored XSS vulnerability in Jenkins Timestamper PluginCVE-2020-2137Fix available4.8 Medium
- jenkins git, jenkins project git plugin +1 moreImproper Neutralization of Input During Web Page Generation in Jenkins Git PluginCVE-2020-2136Fix available5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security PluginCVE-2020-2135Fix available8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security PluginCVE-2020-2134Fix available8.8 High
- cloudbees jenkins, jenkins lts, jenkins project enterprise by cloudbees +1 more +3 moreHash collision attack vulnerability in JenkinsCVE-2012-0785Fix available7.5 High
- jenkins applatix, jenkins project applatix plugin +1 morePassword stored in plain text by Applatix PluginCVE-2020-21336.5 Medium
- jenkins parasoft environment manager, jenkins project parasoft environment manager plugin +1 morePassword stored in plain text by Parasoft Environment Manager PluginCVE-2020-2132Fix available6.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM PluginCVE-2020-21316.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM PluginCVE-2020-21306.5 Medium
- jenkins eagle tester, jenkins project eagle tester plugin +1 morePlaintext Storage of a Password in Jenkins Eagle Tester PluginCVE-2020-21296.5 Medium
- jenkins ecx copy data management, jenkins project ecx copy data management plugin +1 morePassword stored in plain text by ECX Copy Data Management PluginCVE-2020-21284.3 Medium
- jenkins bmc release package and deployment, jenkins project bmc release package and deployment plugin +1 moreCredential stored in plain text by BMC Release Package and Deployment PluginCVE-2020-21274.3 Medium
- jenkins digitalocean, jenkins project digitalocean plugin +1 moreToken stored in plain text by DigitalOcean PluginCVE-2020-2126Fix available4.3 Medium
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreCredentials stored in plain text by debian-package-builder PluginCVE-2020-21254.3 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 morePassword stored in plain text by Dynamic Extended Choice Parameter PluginCVE-2020-21244.3 Medium
- jenkins radargun, jenkins project radargun plugin +1 moreRCE vulnerability in RadarGun PluginCVE-2020-2123Fix available8.8 High
- jenkins brakeman, jenkins project brakeman plugin +1 moreStored XSS vulnerability in Jenkins brakeman PluginCVE-2020-2122Fix available5.4 Medium
- jenkins google kubernetes engine, jenkins project google kubernetes engine plugin +1 moreRCE vulnerability in Google Kubernetes Engine PluginCVE-2020-2121Fix available8.8 High
- jenkins fitnesse, jenkins project fitnesse plugin +1 moreXXE vulnerability in FitNesse PluginCVE-2020-2120Fix available8.8 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreClient secret transmitted in plain text by Azure AD PluginCVE-2020-2119Fix available5.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreUsers with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step PluginCVE-2020-2118Fix available4.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreMissing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentialsCVE-2020-2117Fix available4.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreCSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentialsCVE-2020-2116Fix available8.8 High
- jenkins nunit, jenkins project nunit plugin +1 moreXXE vulnerability in NUnit PluginCVE-2020-2115Fix available8.8 High
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreJenkins S3 Publisher Plugin transmits credentials in plain text during configurationCVE-2020-2114Fix available7.5 High
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)CVE-2020-2113Fix available5.4 Medium
- Show moreLoading…