Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins veracode-scanner, jenkins project veracode-scanner plugin +1 moreJenkins veracode-scanner Plugin stores credentials in plain textCVE-2019-10030708.8 High
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin stores credentials in plain textCVE-2019-1003069Fix available8.8 High
- jenkins vmware vrealize automation, jenkins project vmware vrealize automation plugin +1 moreJenkins VMware vRealize Automation Plugin Missing Encryption of Sensitive DataCVE-2019-10030688.8 High
- jenkins trac publisher, jenkins project trac publisher plugin +1 moreJenkins Trac Publisher Plugin stores credentials in plain textCVE-2019-10030678.8 High
- jenkins bugzilla, jenkins project bugzilla plugin +1 moreJenkins Bugzilla Plugin stores credentials in plain textCVE-2019-10030668.8 High
- jenkins cloudshare docker-machine, jenkins project cloudshare docker-machine plugin +1 moreJenkins CloudShare Docker-Machine Plugin stores credentials in plain textCVE-2019-10030658.8 High
- jenkins aws-device-farm, jenkins project aws-device-farm plugin +1 moreJenkins aws-device-farm Plugin stores credentials in plain textCVE-2019-1003064Fix available8.8 High
- jenkins amazon sns build notifier, jenkins project amazon sns build notifier plugin +1 moreJenkins Amazon SNS Build Notifier Plugin stores credentials in plain textCVE-2019-1003063Fix available8.8 High
- jenkins aws cloudwatch logs publisher, jenkins project aws cloudwatch logs publisher plugin +1 moreJenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain textCVE-2019-10030628.8 High
- jenkins jenkins-cloudformation-plugin, jenkins project jenkins-cloudformation-plugin plugin +1 moreJenkins CloudFormation Plugin stores credentials in plain textCVE-2019-10030618.8 High
- jenkins official owasp zap, jenkins project official owasp zap plugin +1 moreJenkins OWASP ZAP Plugin stores unencrypted credentialsCVE-2019-10030608.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreMissing permission check in Jenkins FTP publisher PluginCVE-2019-10030596.5 Medium
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreCSRF vulnerability in Jenkins FTP publisher PluginCVE-2019-10030586.5 Medium
- jenkins bitbucket approve, jenkins project bitbucket approve plugin +1 moreJenkins Bitbucket Approve Plugin stores credentials in plain textCVE-2019-10030578.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin stores credentials in plain textCVE-2019-10030568.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreJenkins FTP publisher Plugin stores credentials in plain textCVE-2019-10030558.8 High
- jenkins jira issue updater, jenkins project jira issue updater plugin +1 moreJenkins Jira Issue Updater Plugin stores credentials in plain textCVE-2019-10030548.8 High
- jenkins hockeyapp, jenkins project hockeyapp plugin +1 moreJenkins HockeyApp Plugin stores credentials in plain textCVE-2019-10030538.8 High
- jenkins aws elastic beanstalk publisher, jenkins project aws elastic beanstalk publisher plugin +1 moreJenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain textCVE-2019-10030528.8 High
- jenkins irc, jenkins project irc plugin +1 moreJenkins IRC Plugin stores credentials in plain textCVE-2019-10030518.8 High
- jenkins prqa, jenkins project prqa plugin +1 moreJenkins PRQA Plugin stored password in plain textCVE-2019-1003048Fix available7.8 High
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreSSRF vulnerability due to missing permission check in Fortify on Demand Uploader PluginCVE-2019-1003047Fix available6.5 Medium
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreJenkins Fortify on Demand Uploader Plugin CSRF vulnerabilityCVE-2019-1003046Fix available6.5 Medium
- jenkins project ecs publisher plugin, trustsource ecs publisher +1 moreECS Publisher Plugin stored and displayed API token in plain textCVE-2019-1003045Fix available6.5 Medium
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin CSRF vulnerability and missing permission checksCVE-2019-1003044Fix available7.1 High
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin missing permission checkCVE-2019-1003043Fix available7.5 High
- jenkins lockable resources, jenkins project lockable resources plugin +1 moreJenkins Lockable Resources Plugin XSS vulnerabilityCVE-2019-1003042Fix available5.4 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041Fix available9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-1003040Fix available9.8 Critical
- jenkins appdynamics, jenkins project jenkinsappdynamics dashboard plugin +1 moreJenkins AppDynamics Dashboard Plugin has insufficiently protected credentialsCVE-2019-1003039Fix available8.8 High
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin has insufficiently protected credentialsCVE-2019-1003038Fix available7.8 High
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreUnprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents PluginCVE-2019-1003037Fix available6.5 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreMissing permission check in Azure VM Agents Plugin allowed modifying VM configurationCVE-2019-1003036Fix available4.3 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreInformation disclosure in Azure VM Agents PluginCVE-2019-1003035Fix available4.3 Medium
- jenkins job dsl, jenkins project job dsl plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Jenkins Job DSL PluginCVE-2019-1003034Fix available9.9 Critical
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003033Fix available8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreScript security sandbox bypass in Jenkins Email Extension PluginCVE-2019-1003032Fix available9.9 Critical
- jenkins matrix project, jenkins project matrix project plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Matrix Project PluginCVE-2019-1003031Fix available9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy PluginCVE-2019-1003030In KEVPublic exploitFix availableEPSS 97.1%9.9 Critical
- jenkins script security plugin, script security, redhat openshift container platform +2 moreSandbox bypass in Script Security PluginCVE-2019-1003029In KEVPublic exploitFix availableEPSS 74.4%9.9 Critical
- jenkins jms messaging, jenkins project jms messaging plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins JMS Messaging PluginCVE-2019-1003028Fix available4.3 Medium
- jenkins octopusdeploy, jenkins project octopusdeploy plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins OctopusDeploy PluginCVE-2019-1003027Fix available4.3 Medium
- jenkins mattermost, jenkins project mattermost notification plugin +1 moreJenkins Mattermost Notification Plugin vulnerable to SSRFCVE-2019-1003026Fix available4.3 Medium
- jenkins cloud foundry, jenkins project cloud foundry plugin +1 moreJenkins Cloud Foundry Plugin vulnerable to exposure of sensitive informationCVE-2019-1003025Fix available8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreJenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2019-1003024Fix available8.8 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreXSS vulnerability in Jenkins Warnings Next Generation PluginCVE-2019-1003023Fix available6.1 Medium
- jenkins monitoring, jenkins project monitoring plugin +1 moreJenkins Monitoring Plugin vulnerable to Denial of service vulnerabilityCVE-2019-1003022Fix available6.5 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration formCVE-2019-1003021Fix available4.3 Medium
- jenkins kanboard, jenkins project kanboard plugin +1 moreJenkins Kanboard Plugin vulnerable to Server-side request forgery (SSRF)CVE-2019-1003020Fix available4.3 Medium
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin session fixation vulnerabilityCVE-2019-1003019Fix available5.9 Medium
- Show moreLoading…