Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins aws global configuration, jenkins project aws global configuration plugin +1 moreMissing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configurationCVE-2020-2311Fix available4.3 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreMissing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDsCVE-2020-2310Fix available4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreMissing authorization in Jenkins Kubernetes PluginCVE-2020-2309Fix available4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreMissing Authorization in Jenkins Kubernetes PluginCVE-2020-2308Fix available4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes PluginCVE-2020-2307Fix available4.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 moreMissing Authorization in Jenkins Mercurial PluginCVE-2020-2306Fix available4.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 moreXXE vulnerability in Jenkins Mercurial PluginCVE-2020-2305Fix available6.5 Medium
- jenkins subversion, jenkins project subversion plugin +1 moreXXE vulnerability in Jenkins Subversion PluginCVE-2020-2304Fix available6.5 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreCSRF vulnerability in Jenkins Active Directory PluginCVE-2020-2303Fix available4.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreMissing permission check in Jenkins Active Directory Plugin allows accessing domain health check pageCVE-2020-2302Fix available4.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreAuthentication cache in Active Directory Jenkins Plugin allows logging in with any passwordCVE-2020-2301Fix available9.8 Critical
- jenkins active directory, jenkins project active directory plugin +1 moreImproper Authentication (empty password) in Jenkins Active Directory PluginCVE-2020-2300Fix available9.8 Critical
- jenkins active directory, jenkins project active directory plugin +1 moreImproper Authentication in Jenkins Active Directory PluginCVE-2020-2299Fix available9.8 Critical
- jenkins nerrvana, jenkins project nerrvana plugin +1 moreXXE vulnerability in Jenkins Nerrvana PluginCVE-2020-22986.5 Medium
- jenkins sms notification, jenkins project sms notification plugin +1 moreAccess token stored in plain text by Jenkins SMS Notification PluginCVE-2020-22973.3 Low
- jenkins shared objects, jenkins project shared objects plugin +1 moreCSRF vulnerability in Jenkins Shared Objects PluginCVE-2020-22964.3 Medium
- barchart maven cascade release, jenkins project maven cascade release plugin +1 moreCSRF vulnerability in Jenkins Maven Cascade Release PluginCVE-2020-22956.5 Medium
- barchart maven cascade release, jenkins project maven cascade release plugin +1 moreMissing permission checks in Jenkins Maven Cascade Release PluginCVE-2020-22946.5 Medium
- jenkins persona, jenkins project persona plugin +1 moreArbitrary file read vulnerability in Jenkins Persona PluginCVE-2020-22936.5 Medium
- jenkins release, jenkins project release plugin +1 moreStored XSS vulnerability in Jenkins Release PluginCVE-2020-2292Fix available5.4 Medium
- jenkins couchdb-statistics, jenkins project couchdb-statistics plugin +1 morePassword stored in plain text by Jenkins couchdb-statistics PluginCVE-2020-2291Fix available3.3 Low
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices PluginCVE-2020-2290Fix available5.4 Medium
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices PluginCVE-2020-2289Fix available5.4 Medium
- jenkins audit trail, jenkins project audit trail plugin +1 moreIncorrect default pattern in Jenkins Audit Trail PluginCVE-2020-2288Fix available5.3 Medium
- jenkins audit trail, jenkins project audit trail plugin +1 moreRequest logging bypass in Jenkins Audit Trail PluginCVE-2020-2287Fix available5.3 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreImproper authorization due to caching in Jenkins Role-based Authorization Strategy PluginCVE-2020-2286Fix available8.8 High
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreMissing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDsCVE-2020-2285Fix available4.3 Medium
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreXXE vulnerability in Jenkins Liquibase Runner PluginCVE-2020-2284Fix available7.1 High
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreStored XSS vulnerability in Jenkins Liquibase Runner PluginCVE-2020-2283Fix available5.4 Medium
- jenkins implied labels, jenkins project implied labels plugin +1 moreMissing permission check in Jenkins Implied Labels Plugin allows reconfiguring the pluginCVE-2020-2282Fix available4.3 Medium
- jenkins lockable resources, jenkins project lockable resources plugin +1 moreCSRF vulnerability in Jenkins Lockable Resources PluginCVE-2020-2281Fix available5.4 Medium
- jenkins warnings, jenkins project warnings plugin +1 moreCSRF vulnerability in Jenkins warnings Plugin allows remote code executionCVE-2020-2280Fix available8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2020-2279Fix available9.9 Critical
- jenkins storable configs, jenkins project storable configs plugin +1 moreArbitrary file write vulnerability in Jenkins Storable Configs PluginCVE-2020-22786.5 Medium
- jenkins storable configs, jenkins project storable configs plugin +1 moreArbitrary file read vulnerability in Jenkins Storable Configs PluginCVE-2020-22776.5 Medium
- jenkins selection tasks, jenkins project selection tasks plugin +1 moreSystem command execution vulnerability in Selection tasks Jenkins PluginCVE-2020-22768.8 High
- jenkins copy data to workspace, jenkins project copy data to workspace plugin +1 moreArbitrary file read vulnerability in Copy data to workspace Jenkins PluginCVE-2020-22756.5 Medium
- jenkins elastest, jenkins project elastest plugin +1 morePasswords stored in plain text by ElasTest PluginCVE-2020-22745.5 Medium
- jenkins elastest, jenkins project elastest plugin +1 moreCSRF vulnerability in Jenkins ElasTest PluginCVE-2020-22734.3 Medium
- jenkins elastest, jenkins project elastest plugin +1 moreMissing permission checks in Jenkins ElasTest PluginCVE-2020-22724.3 Medium
- jenkins locked files report, jenkins project locked files report plugin +1 moreStored XSS vulnerability in Locked Files Report PluginCVE-2020-22715.4 Medium
- jenkins clearcase release, jenkins project clearcase release plugin +1 moreStored XSS vulnerability in ClearCase Release PluginCVE-2020-22705.4 Medium
- jenkins chosen-views-tabbar, jenkins project chosen-views-tabbar plugin +1 moreStored XSS vulnerability in chosen-views-tabbar PluginCVE-2020-22695.4 Medium
- jenkins mongodb, jenkins project mongodb plugin +1 moreCSRF vulnerability in MongoDB PluginCVE-2020-22688.8 High
- jenkins mongodb, jenkins project mongodb plugin +1 moreMissing permission checks in MongoDB PluginCVE-2020-22674.3 Medium
- jenkins description column, jenkins project description column plugin +1 moreStored XSS vulnerability in Description Column PluginCVE-2020-22665.4 Medium
- jenkins project coverage/complexity scatter plot plugin, jenkins coverage\/complexity scatter plot +1 moreStored XSS vulnerability in Coverage/Complexity Scatter Plot PluginCVE-2020-22655.4 Medium
- jenkins custom job icon, jenkins project custom job icon plugin +1 moreStored XSS vulnerability in Custom Job Icon PluginCVE-2020-22645.4 Medium
- jenkins radiator view, jenkins project radiator view plugin +1 moreStored XSS vulnerability in Radiator View PluginCVE-2020-22635.4 Medium
- jenkins android lint, jenkins project android lint plugin +1 moreStored XSS vulnerability in android-lint PluginCVE-2020-22625.4 Medium
- Show moreLoading…