Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25181Fix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has Insufficiently Protected CredentialsCVE-2022-25180Fix available4.3 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25178Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25177Fix available6.5 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy PluginCVE-2022-25176Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25174Public exploitFix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy PluginCVE-2022-25173Public exploitFix available8.8 High
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreLink Following in Jenkins Pipeline Multibranch PluginCVE-2022-25179Fix available6.5 Medium
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Multibranch Plugin vulnerable to OS Command InjectionCVE-2022-25175Public exploitFix available8.8 High
- jenkinsDoS vulnerability in bundled XStream library in Jenkins CoreCVE-2022-0538Fix available7.5 High
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreAgent-to-controller security bypass in Jenkins Debian Package Builder PluginCVE-2022-231188.8 High
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreAgent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentialsCVE-2022-23117Fix available7.5 High
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreAgent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secretsCVE-2022-23116Fix available7.5 High
- jenkins batch task, jenkins project batch task plugin +1 moreCSRF vulnerability in Jenkins batch task PluginCVE-2022-231155.4 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 morePassword stored in plain text by Jenkins Publish Over SSH PluginCVE-2022-23114Fix available3.3 Low
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 morePath traversal vulnerability in Jenkins Publish Over SSH PluginCVE-2022-23113Fix available4.3 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreMissing permission check in Jenkins Publish Over SSH PluginCVE-2022-23112Fix available6.5 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreCSRF vulnerability and missing permission checks in Jenkins Publish Over SSH PluginCVE-2022-23111Fix availableEPSS 26.5%4.3 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreStored XSS vulnerability in Jenkins Publish Over SSH PluginCVE-2022-23110Fix available4.8 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreImproper credentials masking in Jenkins HashiCorp Vault PluginCVE-2022-23109Fix available6.5 Medium
- jenkins badge, jenkins project badge plugin +1 moreStored XSS vulnerability in Jenkins Badge PluginCVE-2022-23108Fix available5.4 Medium
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 morePath Traversal in Jenkins Warnings Next Generation PluginCVE-2022-23107Fix available8.1 High
- jenkins active directory, jenkins project active directory plugin +1 moreUser passwords transmitted in plain text by Jenkins Active Directory PluginCVE-2022-23105Fix available6.5 Medium
- jenkins metrics, jenkins project metrics plugin +1 moreAccess key stored in plain text by Jenkins Metrics PluginCVE-2022-20621Fix available5.5 Medium
- jenkins ssh agent, jenkins project ssh agent plugin +1 moreMissing permission checks in SSH Agent Plugin allow enumerating credentials IDsCVE-2022-20620Fix available4.3 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreCross-Site Request Forgery in Jenkins Bitbucket Branch Source PluginCVE-2022-20619Fix available7.1 High
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreIncorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source PluginCVE-2022-20618Fix available4.3 Medium
- jenkins docker commons, jenkins project docker commons plugin +1 moreOS command execution vulnerability in Jenkins Docker Commons PluginCVE-2022-20617Public exploitFix available8.8 High
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreIncorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding PluginCVE-2022-20616Fix available4.3 Medium
- jenkins matrix project, jenkins project matrix project plugin, oracle communications cloud native core automated test suite +2 moreStored XSS vulnerability in Matrix Project PluginCVE-2022-20615Fix availableEPSS 81.8%5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in JenkinsCVE-2022-20612Fix available4.3 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreObservable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code PluginCVE-2022-23106Fix available5.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreIncorrect Permission Assignment for Critical Resource in Jenkins Mailer PluginCVE-2022-20614Fix available4.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreCross-Site Request Forgery in Jenkins Mailer PluginCVE-2022-20613Fix available4.3 Medium
- jenkins squash tm publisher, jenkins project squash tm publisher (squash4jenkins) plugin +1 moreAgent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary filesCVE-2021-435788.1 High
- jenkins owasp dependency-check, jenkins project owasp dependency-check plugin +1 moreXXE vulnerability in Jenkins OWASP Dependency-Check PluginCVE-2021-43577Fix available7.1 High
- jenkins pom2config, jenkins project pom2config plugin +1 moreXXE vulnerability in Jenkins pom2config PluginCVE-2021-435766.5 Medium
- jenkins performance, jenkins project performance plugin +1 moreXXE vulnerability in Jenkins Performance PluginCVE-2021-217016.5 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler PluginCVE-2021-21700Fix available5.4 Medium
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices PluginCVE-2021-21699Fix availableEPSS 88.5%5.4 Medium
- jenkins subversion, jenkins project subversion plugin +1 morePath traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary filesCVE-2021-21698Fix available7.5 High
- jenkinsAgent-to-controller access control allows reading/writing most content of build directories in JenkinsCVE-2021-21697Fix available9.1 Critical
- jenkinsAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2021-21696Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21695Fix available8.8 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21694Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21692Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21691Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21690Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21689Fix available9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21688Fix available7.5 High
- Show moreLoading…