Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins ssh2 easy, jenkins project ssh2 easy plugin +1 moreDisabled permissions can be granted by Jenkins SSH2 Easy PluginCVE-2023-41939Fix available8.8 High
- jenkins ivy, jenkins project ivy plugin +1 moreCSRF vulnerability in Jenkins Ivy PluginCVE-2023-419386.5 Medium
- jenkins bitbucket push and pull request, jenkins project bitbucket push and pull request plugin +1 moreSSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentialsCVE-2023-41937Fix available7.5 High
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin non-constant time token comparisonCVE-2023-41936Fix available7.5 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreNon-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) PluginCVE-2023-41935Fix available7.5 High
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreImproper masking of credentials in Jenkins Pipeline Maven Integration PluginCVE-2023-41934Fix available5.3 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreJob Configuration History Plugin's path traversal allows exploiting XXE vulnerabilityCVE-2023-41933Fix available8.8 High
- jenkins job configuration history, jenkins project job configuration history plugin +1 morePath traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History PluginCVE-2023-41932Fix available6.5 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreXSS vulnerability in Jenkins Job Configuration History PluginCVE-2023-41931Fix available5.4 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 morePath traversal in Jenkins Job Configuration History PluginCVE-2023-41930Fix available4.3 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreCSRF vulnerability in Fortify Plugin allow capturing credentialsCVE-2023-4301Fix available4.2 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreMissing permission checks in Fortify Plugin allow capturing credentialsCVE-2023-4302Fix available4.2 Medium
- jenkins fortify, jenkins project fortify plugin +1 moreHTML injection vulnerability in Fortify PluginCVE-2023-4303Fix available4.3 Medium
- jenkins favorite view, jenkins project favorite view plugin +1 moreJenkins Favorite View Plugin cross-site request forgery vulnerabilityCVE-2023-403514.3 Medium
- jenkins docker swarm, jenkins project docker swarm plugin +1 moreJenkins Docker Swarm Plugin stored cross-site scripting vulnerabilityCVE-2023-403505.4 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosureCVE-2023-403495.3 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosureCVE-2023-403485.3 Medium
- jenkins project maven artifact choicelistprovider (nexus) plugin, jenkins maven artifact choicelistprovider \(nexus\) +1 moreJenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-403476.5 Medium
- jenkins shortcut job, jenkins project shortcut job plugin +1 moreJenkins Shortcut Job Plugin stored cross-site scripting vulnerabilityCVE-2023-40346Fix available5.4 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-40345Fix available6.5 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin missing permission checkCVE-2023-40344Fix available4.3 Medium
- jenkins tuleap authentication, jenkins project tuleap authentication plugin +1 moreJenkins Tuleap Authentication Plugin non-constant time token comparisonCVE-2023-40343Fix available5.9 Medium
- jenkins flaky test handler, jenkins project flaky test handler plugin +1 moreJenkins Flaky Test Handler Plugin stored cross-site scripting vulnerabilityCVE-2023-40342Fix available5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 moreJenkins Blue Ocean Plugin cross-site request forgery vulnerabilityCVE-2023-40341Fix available8.8 High
- jenkins nodejs, jenkins project nodejs plugin +1 moreJenkins NodeJS Plugin improper credential masking vulnerabilityCVE-2023-40340Fix available7.5 High
- jenkins config file provider, jenkins project config file provider plugin +1 moreJenkins Config File Provider Plugin improper credential masking vulnerabilityCVE-2023-40339Fix available7.5 High
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin information disclosure vulnerabilityCVE-2023-40338Fix available4.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin cross-site request forgery vulnerabilityCVE-2023-40337Fix available4.3 Medium
- jenkins folders, jenkins project folders plugin +1 moreJenkins Folders Plugin cross-site request forgery vulnerabilityCVE-2023-40336Fix available8.8 High
- jenkins bazaar, jenkins project bazaar plugin +1 moreCSRF vulnerability in Bazaar PluginCVE-2023-391565.3 Medium
- jenkins chef identity, jenkins project chef identity plugin +1 moreSecret displayed without masking by Chef Identity PluginCVE-2023-391555.3 Medium
- jenkins qualys web app scanning connector, jenkins project qualys web app scanning connector plugin +1 moreIncorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentialsCVE-2023-39154Fix available6.5 Medium
- jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 moreCSRF vulnerability in GitLab Authentication PluginCVE-2023-39153Fix available5.4 Medium
- jenkins gradle, jenkins project gradle plugin +1 moreIncorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build logCVE-2023-39152Fix available6.5 Medium
- jenkinsJenkins Stored Cross-site Scripting vulnerabilityCVE-2023-39151Fix available5.4 Medium
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreJenkins ElasticBox CI Plugin missing permission checkCVE-2023-379657.1 High
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreJenkins ElasticBox CI Plugin vulnerable to cross-site request forgeryCVE-2023-379648.8 High
- jenkins benchmark evaluator, jenkins project benchmark evaluator plugin +1 moreJenkins Benchmark Evaluator Plugin missing permission checkCVE-2023-379635.4 Medium
- jenkins benchmark evaluator, jenkins project benchmark evaluator plugin +1 moreJenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgeryCVE-2023-379628.8 High
- jenkins assembla, jenkins project assembla auth plugin +1 moreJenkins Assembla Auth Plugin vulnerable to cross-site request forgeryCVE-2023-379618.8 High
- jenkins mathworks polyspace, jenkins project mathworks polyspace plugin +1 moreJenkins MathWorks Polyspace Plugin vulnerable to arbitrary file readCVE-2023-379606.5 Medium
- jenkins sumologic publisher, jenkins project sumologic publisher plugin +1 moreJenkins Sumologic Publisher Plugin missing permission checkCVE-2023-379596.5 Medium
- jenkins sumologic publisher, jenkins project sumologic publisher plugin +1 moreJenkins Sumologic Publisher Plugin vulnerable to cross-site request forgeryCVE-2023-379588.8 High
- jenkins pipeline restful api, jenkins project pipeline restful api plugin +1 moreJenkins Pipeline restFul API Plugin vulnerable to Cross Site Request ForgeryCVE-2023-379578.8 High
- jenkins test results aggregator, jenkins project test results aggregator plugin +1 moreJenkins Test Results Aggregator Plugin missing permission checkCVE-2023-379566.5 Medium
- jenkins test results aggregator, jenkins project test results aggregator plugin +1 moreJenkins Test Results Aggregator Plugin vulnerable to Cross Site Request ForgeryCVE-2023-37955Fix available6.5 Medium
- jenkins rebuilder, jenkins project rebuilder plugin +1 moreJenkins Rebuilder Plugin vulnerable to Cross Site Request ForgeryCVE-2023-379544.3 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin missing permission checkCVE-2023-37953Fix available6.5 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin vulnerable to cross-site request forgeryCVE-2023-37952Fix available6.5 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin vulnerable to exposure of system-scooped credentialsCVE-2023-37951Fix available6.5 Medium
- Show moreLoading…