Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated usersCVE-2025-536686.5 Medium
- jenkins project dead man's snitch plugin, jenkins dead man\'s snitch +1 moreJenkins Dead Man's Snitch Plugin vulnerability does not mask tokensCVE-2025-536675.3 Medium
- jenkins project dead man's snitch plugin, jenkins dead man\'s snitch +1 moreJenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain textCVE-2025-536666.5 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokensCVE-2025-536654.3 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokensCVE-2025-536646.5 Medium
- jenkins ibm cloud devops, jenkins project ibm cloud devops plugin +1 moreJenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokensCVE-2025-536636.5 Medium
- jenkins ifttt build notifier, jenkins project ifttt build notifier plugin +1 moreJenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel KeysCVE-2025-536626.5 Medium
- jenkins testsigma test plan run, jenkins project testsigma test plan run plugin +1 moreJenkins Testsigma Test Plan vulnerability exposes API keys via job configuration formCVE-2025-536614.3 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin vulnerability exposes API keysCVE-2025-536604.3 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin stores unencrypted API keysCVE-2025-536596.5 Medium
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerable to XSS through its Build pageCVE-2025-53658Fix available5.4 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability exposes secretsCVE-2025-536574.3 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentialsCVE-2025-536566.5 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin does not mask AWS Secret KeyCVE-2025-536555.3 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret KeyCVE-2025-536546.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokensCVE-2025-536534.3 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter checkCVE-2025-53652Public exploitFix available8.2 High
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin vulnerability displays controller file system information in its logsCVE-2025-53651Fix available6.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreJenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messagesCVE-2025-53650Fix available7.3 High
- jenkins gatling, jenkins project gatling plugin +1 moreJenkins Gatling Plugin Vulnerable to Cross-Site Scripting (XSS)CVE-2025-58068.0 High
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin Fails to Properly Authenticate User CredentialsCVE-2025-478899.8 Critical
- jenkins dingtalk, jenkins project dingtalk plugin +1 moreJenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname ValidationCVE-2025-478885.9 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin is Missing Permission ChecksCVE-2025-47887Fix available4.3 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Vulnerable to Cross-Site Request ForgeryCVE-2025-47886Fix available4.3 Medium
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreJenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site ScriptingCVE-2025-47885Fix available8.8 High
- jenkins openid connect provider, jenkins project openid connect provider plugin +1 moreJenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID TokensCVE-2025-47884Fix available9.1 Critical
- jenkins ssh-slave, jenkins project jenkins/ssh-slave docker images +1 moreIn jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation...CVE-2025-327559.1 Critical
- jenkins ssh-agent, jenkins project jenkins/ssh-agent docker images +1 moreIn jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image...CVE-2025-327549.1 Critical
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration FormCVE-2025-317285.5 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` FilesCVE-2025-317275.5 Medium
- jenkins stack hammer, jenkins project stack hammer plugin +1 moreJenkins Stack Hammer Plugin Stores API Keys Unencrypted in Job `config.xml` FilesCVE-2025-317265.5 Medium
- jenkins monitor-remote-job, jenkins project monitor-remote-job plugin +1 moreJenkins monitor-remote-job Plugin Stores Passwords UnencryptedCVE-2025-317255.5 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys UnencryptedCVE-2025-31724Fix available4.3 Medium
- jenkins simple queue, jenkins project simple queue plugin +1 moreJenkins Simple Queue Plugin Cross-Site Request Forgery (CSRF)CVE-2025-31723Fix available4.3 Medium
- jenkins templating engine, jenkins project templating engine plugin +1 moreJenkins Templating Engine Plugin Vulnerable to Arbitrary Code ExecutionCVE-2025-31722Public exploitFix available8.8 High
- jenkinsJenkins Missing Permission CheckCVE-2025-31721Fix available4.3 Medium
- jenkinsJenkins Missing Permission CheckCVE-2025-31720Fix available4.3 Medium
- jenkins zoho qengine, jenkins project zoho qengine plugin +1 moreJenkins Zoho QEngine Plugin Displays Unmasked API KeysCVE-2025-30197Fix available3.1 Low
- jenkins anchorchain, jenkins project anchorchain plugin +1 moreJenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) VulnerabilityCVE-2025-301966.5 Medium
- jenkinsJenkins Open Redirect vulnerabilityCVE-2025-27625Fix available4.3 Medium
- jenkinsJenkins cross-site request forgery (CSRF) vulnerabilityCVE-2025-27624Fix available5.4 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permissionCVE-2025-27623Fix available4.3 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permissionCVE-2025-27622Fix available4.3 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreMissing permission checks in Jenkins Azure Service Fabric PluginCVE-2025-244034.3 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreCSRF vulnerability in Jenkins Azure Service Fabric PluginCVE-2025-244024.3 Medium
- jenkins folder-based authorization strategy, jenkins project folder-based authorization strategy plugin +1 moreDisabled permissions can be granted by Folder-based in Jenkins Authorization Strategy PluginCVE-2025-244016.8 Medium
- jenkins eiffel broadcaster, jenkins project eiffel broadcaster plugin +1 moreCache confusion in Jenkins Eiffel Broadcaster PluginCVE-2025-24400Fix available4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreImproper handling of case sensitivity in Jenkins OpenId Connect Authentication PluginCVE-2025-24399Fix available8.8 High
- jenkins bitbucket server integration, jenkins project bitbucket server integration plugin +1 moreBitbucket Server Integration Plugin allows bypassing CSRF protection for any URLCVE-2025-24398Fix available8.8 High
- jenkins gitlab, jenkins project gitlab plugin +1 moreIncorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDsCVE-2025-24397Fix available4.3 Medium
- Show moreLoading…