Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins android signing, jenkins project android signing plugin +1 moreJenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contentsCVE-2022-369154.3 Medium
- jenkins files found trigger, jenkins project files found trigger plugin +1 moreJenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file systemCVE-2022-369144.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreJenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validationCVE-2022-369134.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreMissing permission checks in Jenkins openstack-heat PluginCVE-2022-369124.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreCSRF vulnerability in Jenkins openstack-heat PluginCVE-2022-369116.5 Medium
- jenkins lucene-search, jenkins project lucene-search plugin +1 moreLucene-Search Plugin does not perform permission checks in several HTTP endpointsCVE-2022-36910Fix available5.4 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreMissing permission check in Jenkins OpenShift Deployer PluginCVE-2022-369096.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCSRF vulnerability in Jenkins OpenShift Deployer PluginCVE-2022-369086.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreMissing permission check in Jenkins OpenShift Deployer PluginCVE-2022-369076.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCSRF vulnerability in Jenkins OpenShift Deployer PluginCVE-2022-369066.5 Medium
- jenkins maven metadata, jenkins project maven metadata plugin for jenkins ci server plugin +1 moreStored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server pluginCVE-2022-369055.4 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin does not perform a permission check in a method implementing form validationCVE-2022-369044.3 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin allows attackers with Overall/Read permission to enumerate credentials IDsCVE-2022-369034.3 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 moreStored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter pluginCVE-2022-369025.4 Medium
- jenkins http request, jenkins project http request plugin +1 moreJenkins HTTP Request Plugin stores HTTP Request passwords unencryptedCVE-2022-36901Fix available6.5 Medium
- jenkins compuware zadviser api, jenkins project compuware zadviser api plugin +1 moreJenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failureCVE-2022-36900Fix available8.2 High
- jenkins compuware ispw operations, jenkins project compuware ispw operations plugin +1 moreAgent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations pluginCVE-2022-36899Fix available8.2 High
- jenkins compuware ispw operations, jenkins project compuware ispw operations plugin +1 moreJenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpointsCVE-2022-36898Fix available4.3 Medium
- jenkins compuware xpediter code coverage, jenkins project compuware xpediter code coverage plugin +1 moreJenkins Compuware Xpediter Code Coverage Plugin Missing AuthorizationCVE-2022-36897Fix available4.3 Medium
- jenkins project compuware source code download for endevor, pds, and ispw plugin, jenkins compuware source code download for endevor\, pds\, and ispw +1 moreJenkins Compuware Source Code Download is missing authorizationCVE-2022-36896Fix available6.5 Medium
- jenkins compuware topaz utilities, jenkins project compuware topaz utilities plugin +1 moreJenkins Compuware Topaz Utilities Plugin is missing authorizationCVE-2022-36895Fix available4.3 Medium
- jenkins clif performance testing, jenkins project clif performance testing plugin +1 moreArbitrary file write vulnerability in Jenkins CLIF Performance Testing pluginCVE-2022-36894Fix available6.5 Medium
- jenkins rpmsign-plugin, jenkins project rpmsign-plugin plugin +1 moreJenkins rpmsign-plugin does not perform a permission check in a method implementing form validationCVE-2022-36893Fix available4.3 Medium
- jenkins rhnpush-plugin, jenkins project rhnpush-plugin plugin +1 moreJenkins rhnpush-plugin does not perform a permission check in a method implementing form validationCVE-2022-36892Fix available4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logsCVE-2022-36891Fix available4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin vulnerable to Path TraversalCVE-2022-36890Fix available4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deploymentCVE-2022-36889Fix available8.8 High
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection testsCVE-2022-36888Fix available6.5 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreJenkins Job Configuration History Plugin does not require POST requests for several HTTP endpointsCVE-2022-36887Fix available4.3 Medium
- jenkins external monitor job type, jenkins project external monitor job type plugin +1 moreExternal Monitor Job Type Plugin does not require POST requests for an HTTP endpointCVE-2022-36886Fix available4.3 Medium
- jenkins github, jenkins project github plugin +1 moreJenkins GitHub plugin uses weak webhook signature functionCVE-2022-36885Fix available5.3 Medium
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhookCVE-2022-36884Fix available5.3 Medium
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhookCVE-2022-36883Public exploitFix available7.5 High
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhookCVE-2022-36882Fix available8.8 High
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client plugin 3.11.0 does not perform SSH host key verificationCVE-2022-36881Fix available8.1 High
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modificationCVE-2015-5298Fix available6.5 Medium
- jenkins failed job deactivator, jenkins project failed job deactivator plugin +1 moreJenkins Failed Job Deactivator Plugin Missing Authorization vulnerabilityCVE-2022-348184.3 Medium
- jenkins failed job deactivator, jenkins project failed job deactivator plugin +1 moreCross-Site Request Forgery in Jenkins Failed Job Deactivator PluginCVE-2022-348174.3 Medium
- jenkins hpe network virtualization, jenkins project hpe network virtualization plugin +1 morePasswords stored in plain text by Jenkins hpe-network-virtualization pluginCVE-2022-348166.5 Medium
- jenkins request rename or delete, jenkins project request rename or delete plugin +1 moreCross-Site Request Forgery in Jenkins Request Rename Or Delete PluginCVE-2022-348154.3 Medium
- jenkins request rename or delete, jenkins project request rename or delete plugin +1 moreIncorrect Authorization in Jenkins Request Rename Or Delete PluginCVE-2022-348144.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 moreJenkins XPath Configuration Viewer Plugin Missing Authorization vulnerabilityCVE-2022-348134.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 moreCross-Site Request Forgery in Jenkins XPath Configuration Viewer PluginCVE-2022-348124.3 Medium
- jenkins xpath configuration viewer, jenkins project xpath configuration viewer plugin +1 moreMissing Authorization in Jenkins XPath Configuration Viewer PluginCVE-2022-348114.3 Medium
- jenkins rqm, jenkins project rqm plugin +1 moreJenkins RQM Plugin allows enumerating credentials IDs due to missing permission checkCVE-2022-348106.5 Medium
- jenkins rqm, jenkins project rqm plugin +1 morePassword stored in plain text by Jenkins RQM PluginCVE-2022-348096.5 Medium
- jenkins cisco spark, jenkins project cisco spark plugin +1 moreToken stored in plain text by Jenkins Cisco Spark PluginCVE-2022-348084.3 Medium
- jenkins elasticsearch query, jenkins project elasticsearch query plugin +1 morePlaintext Storage of a Password in Jenkins Elasticsearch Query PluginCVE-2022-348076.5 Medium
- jenkins jigomerge, jenkins project jigomerge plugin +1 morePlaintext Storage of a Password in Jenkins Jigomerge PluginCVE-2022-348066.5 Medium
- jenkins skype notifier, jenkins project skype notifier plugin +1 morePlaintext Storage of a Password in Jenkins Skype notifier PluginCVE-2022-348056.5 Medium
- Show moreLoading…