Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins project pipeline: stage view plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in JenkinsCVE-2022-43408Fix available6.5 Medium
- jenkins project pipeline: input step plugin, jenkins pipeline\ +1 moreCSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step PluginCVE-2022-43407Fix available8.8 High
- jenkins groovy libraries, jenkins project pipeline: deprecated groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries PluginCVE-2022-43406Fix available9.9 Critical
- jenkins groovy libraries, jenkins project pipeline: groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries PluginCVE-2022-43405Fix available9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43404Fix available9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2022-43403Fix available9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code executionCVE-2022-43402Fix available9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy PluginCVE-2022-43401Fix available9.9 Critical
- jenkins cons3rt, jenkins project cons3rt plugin +1 moreAPI token stored in plain text by Jenkins CONS3RT PluginCVE-2022-412556.5 Medium
- jenkins cons3rt, jenkins project cons3rt plugin +1 moreMissing permission checks in Jenkins CONS3RT Plugin allow capturing credentialsCVE-2022-412546.5 Medium
- jenkins cons3rt, jenkins project cons3rt plugin +1 moreCSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentialsCVE-2022-412538.8 High
- jenkins cons3rt, jenkins project cons3rt plugin +1 moreMissing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDsCVE-2022-412524.3 Medium
- jenkins apprenda, jenkins project apprenda plugin +1 moreJenkins Apprenda Plugin has Missing Authorization vulnerabilityCVE-2022-412514.3 Medium
- jenkins scm httpclient, jenkins project scm httpclient plugin +1 moreMissing permission check in Jenkins SCM HttpClient Plugin allow capturing credentialsCVE-2022-412506.5 Medium
- jenkins scm httpclient, jenkins project scm httpclient plugin +1 moreJenkins SCM HttpClient Plugin vulnerable to Cross-Site Request ForgeryCVE-2022-412498.8 High
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin Missing Password Field MaskingCVE-2022-412485.3 Medium
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin stores BigPanda API key unencryptedCVE-2022-412474.3 Medium
- jenkins worksoft execution manager, jenkins project worksoft execution manager plugin +1 moreCSRF vulnerability and mMCVE-2022-412466.5 Medium
- jenkins worksoft execution manager, jenkins project worksoft execution manager plugin +1 moreCSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentialsCVE-2022-41245Fix available8.8 High
- jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreMissing hostname validation in Jenkins View26 Test-Reporting PluginCVE-2022-412448.1 High
- jenkins smalltest, jenkins project smalltest plugin +1 moreJenkins SmallTest Plugin missing hostname validationCVE-2022-412438.1 High
- jenkins extreme-feedback, jenkins project extreme-feedback plugin +1 moreJenkins extreme-feedback Plugin vulnerable to Missing AuthorizationCVE-2022-412425.4 Medium
- jenkins rqm, jenkins project rqm plugin +1 moreJenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-412419.1 Critical
- jenkins walti, jenkins project walti plugin +1 moreStored XSS vulnerability in Jenkins Walti pluginCVE-2022-412405.4 Medium
- jenkins dotci, jenkins project dotci plugin +1 moreStored XSS vulnerability in Jenkins DotCi PluginCVE-2022-412395.4 Medium
- jenkins dotci, jenkins project dotci plugin +1 moreLack of authentication mechanism in Jenkins DotCi Plugin webhookCVE-2022-412389.8 Critical
- jenkins dotci, jenkins project dotci plugin +1 moreRCE vulnerability in Jenkins DotCi PluginCVE-2022-412379.8 Critical
- jenkins security inspector, jenkins project security inspector plugin +1 moreCSRF vulnerability in Jenkins Security Inspector pluginCVE-2022-412368.8 High
- jenkins wildfly deployer, jenkins project wildfly deployer plugin +1 moreJenkins WildFly Deployer Plugin vulnerable to path traversalCVE-2022-412355.3 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreMissing webhook endpoint authorization in Jenkins Rundeck PluginCVE-2022-41234Fix available8.8 High
- jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin Missing Authorization vulnerabilityCVE-2022-41233Fix available4.3 Medium
- jenkins build-publisher, jenkins project build-publisher plugin +1 moreJenkins build-publisher plugin vulnerable to cross-site request forgeryCVE-2022-412328.0 High
- jenkins build-publisher, jenkins project build-publisher plugin +1 morePath traversal in Jenkins build-publisher PluginCVE-2022-412315.7 Medium
- jenkins build-publisher, jenkins project build-publisher plugin +1 moreMissing permission check in Jenkins build-publisher PluginCVE-2022-412304.3 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site ScriptingCVE-2022-41229Fix available5.4 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing AuthorizationCVE-2022-41228Fix available8.8 High
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request ForgeryCVE-2022-41227Fix available8.8 High
- jenkins compuware common configuration, jenkins project compuware common configuration plugin +1 moreJenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2022-41226Fix available9.8 Critical
- jenkins anchore container image scanner, jenkins project anchore container image scanner plugin +1 moreJenkins Anchore Container Image Scanner Plugin vulnerable to cross site scriptingCVE-2022-41225Fix available5.4 Medium
- jenkinsJenkins vulnerable to stored cross site scripting in the I:helpIcon componentCVE-2022-41224Fix available5.4 Medium
- jenkins collabnet, jenkins project collabnet plugins plugin +1 moreRabbitMQ password stored in plain text by Jenkins CollabNet Plugins PluginCVE-2022-38665Fix available6.5 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreCross-site Scripting in Jenkins Job Configuration History PluginCVE-2022-38664Fix available5.4 Medium
- jenkins git, jenkins project git plugin +1 moreImproper masking of credentials Jenkins in Git PluginCVE-2022-38663Fix available6.5 Medium
- jenkins lucene-search, jenkins project lucene-search plugin +1 moreJenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scriptingCVE-2022-36922Fix available6.1 Medium
- jenkins coverity, jenkins project coverity plugin +1 moreMissing permission check in Coverity Plugin allows capturing credentialsCVE-2022-369218.1 High
- jenkins coverity, jenkins project coverity plugin +1 moreJenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)CVE-2022-369208.8 High
- jenkins coverity, jenkins project coverity plugin +1 moreJenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDsCVE-2022-369194.3 Medium
- jenkins buckminster, jenkins project buckminster plugin +1 moreJenkins Buckminster Plugin does not perform a permission check in a method implementing form validationCVE-2022-369184.3 Medium
- jenkins google cloud backup, jenkins project google cloud backup plugin +1 moreJenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.CVE-2022-369174.3 Medium
- jenkins google cloud backup, jenkins project google cloud backup plugin +1 moreCSRF vulnerability in Jenkins Google Cloud Backup PluginCVE-2022-369168.0 High
- Show moreLoading…