Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins, red hat openshift developer tools and services 4.12, openshift developer tools and services 4.13 +9 more +11 moreJenkins has a link following vulnerability allows arbitrary file creationCVE-2026-33001Fix available8.8 High
- jenkinsJenkins has a build information disclosure vulnerability through Run ParameterCVE-2026-27100Fix available4.3 Medium
- jenkinsJenkins has a stored XSS vulnerability in node offline cause descriptionCVE-2026-27099Fix available8.0 High
- jenkins redpen - pipeline reporter for jira, jenkins project redpen - pipeline reporter for jira plugin +1 moreJenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerabilityCVE-2025-676434.3 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin exposes system-scoped Vault credentialsCVE-2025-676424.3 Medium
- jenkins coverage, jenkins project coverage plugin +1 moreJenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerabilityCVE-2025-67641Fix available5.4 Medium
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin has an OS command injection vulnerability on agents in Git client PluginCVE-2025-67640Fix available5.0 Medium
- jenkinsJenkins has a CSRF vulnerability on the login formCVE-2025-67639Fix available3.5 Low
- jenkinsJenkins's build authorization token is stored and displayed in plain textCVE-2025-67638Fix available4.3 Medium
- jenkinsJenkins's build authorization token is stored and displayed in plain textCVE-2025-67637Fix available4.3 Medium
- jenkinsJenkins is missing a permission check on password fieldsCVE-2025-67636Fix available4.3 Medium
- jenkinsJenkins has a Denial of service vulnerability in HTTP-based CLICVE-2025-67635Fix available7.5 High
- jenkins publish to bitbucket, jenkins project publish to bitbucket plugin +1 moreJenkins Publish to Bitbucket Plugin is missing a permissions checkCVE-2025-641505.4 Medium
- jenkins publish to bitbucket, jenkins project publish to bitbucket plugin +1 moreJenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions checkCVE-2025-641495.4 Medium
- jenkins publish to bitbucket, jenkins project publish to bitbucket plugin +1 moreJenkins Publish to Bitbucket Plugin is missing a permissions checkCVE-2025-641484.3 Medium
- jenkins curseforge publisher, jenkins project curseforge publisher plugin +1 moreJenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration formCVE-2025-641474.3 Medium
- jenkins curseforge publisher, jenkins project curseforge publisher plugin +1 moreJenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml filesCVE-2025-641464.3 Medium
- jenkins byteguard build actions, jenkins project byteguard build actions plugin +1 moreJenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration formCVE-2025-641454.3 Medium
- jenkins byteguard build actions, jenkins project byteguard build actions plugin +1 moreJenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml filesCVE-2025-641444.3 Medium
- jenkins openshift pipeline, jenkins project openshift pipeline plugin +1 moreJenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml filesCVE-2025-641434.3 Medium
- jenkins nexus task runner, jenkins project nexus task runner plugin +1 moreJenkins Nexus Task Runner Plugin is missing a permission checkCVE-2025-641424.3 Medium
- jenkins nexus task runner, jenkins project nexus task runner plugin +1 moreJenkins Nexus Task Runner Plugin vulnerable to cross-site request forgeryCVE-2025-641414.3 Medium
- jenkins azure cli, jenkins project azure cli plugin +1 moreJenkins Azure CLI Plugin does not restrict the commands it executesCVE-2025-641408.8 High
- jenkins start windocks container, jenkins project start windocks containers plugin +1 moreJenkins Start Windocks Containers Plugin is missing a permission checkCVE-2025-641394.3 Medium
- jenkins start windocks container, jenkins project start windocks containers plugin +1 moreJenkins Start Windocks Containers Plugin vulnerable to cross-site request forgeryCVE-2025-641384.3 Medium
- jenkins themis, jenkins project themis plugin +1 moreJenkins Themis Plugin is missing a permission checkCVE-2025-641374.3 Medium
- jenkins themis, jenkins project themis plugin +1 moreJenkins Themis Plugin vulnerable to cross-site request forgeryCVE-2025-641364.3 Medium
- jenkins eggplant runner, jenkins project eggplant runner plugin +1 moreJenkins Eggplant Runner Plugin protection mechanism disabledCVE-2025-641355.9 Medium
- jenkins jdepend, jenkins project jdepend plugin +1 moreJenkins JDepend Plugin vulnerable to XML external entity attacksCVE-2025-641347.1 High
- jenkins extensible choice parameter, jenkins project extensible choice parameter plugin +1 moreJenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgeryCVE-2025-641335.4 Medium
- jenkins mcp server, jenkins project mcp server plugin +1 moreJenkins MCP Server Plugin does not perform permission checks in multiple MCP toolsCVE-2025-64132Fix available5.4 Medium
- jenkins saml, jenkins project saml plugin +1 moreJenkins SAML Plugin does not implement a replay cacheCVE-2025-64131Fix available7.5 High
- jenkinsJenkins has a log message injection vulnerabilityCVE-2025-59476Fix available5.3 Medium
- jenkinsJenkins is missing a permission check in the authenticated users' profile menuCVE-2025-59475Fix available4.3 Medium
- jenkinsJenkins has a missing permission check, allowing users to obtain agent namesCVE-2025-59474Fix available5.3 Medium
- jenkins opentelemetry, jenkins project opentelemetry plugin +1 moreJenkins OpenTelemetry Plugin missing permission check allows capturing credentialsCVE-2025-58460Fix available4.2 Medium
- jenkins project global-build-stats plugin, jenkins global build stats +1 moreJenkins global-build-stats Plugin missing permission check can result in graph IDs being enumeratedCVE-2025-58459Fix available4.3 Medium
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin file system information disclosure vulnerabilityCVE-2025-58458Fix available4.3 Medium
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration formCVE-2025-537435.3 Medium
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated usersCVE-2025-537426.5 Medium
- jenkins user1st utester, jenkins project user1st utester plugin +1 moreJenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated usersCVE-2025-536786.5 Medium
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability does not mask its Xooa Deployment TokenCVE-2025-536775.3 Medium
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated usersCVE-2025-536766.5 Medium
- jenkins warrior framework, jenkins project warrior framework plugin +1 moreJenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated usersCVE-2025-536756.5 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokensCVE-2025-536745.3 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration fileCVE-2025-536736.5 Medium
- jenkins kryptowire, jenkins project kryptowire plugin +1 moreJenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API keyCVE-2025-536726.5 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration formCVE-2025-536716.5 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentialsCVE-2025-536706.5 Medium
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration formCVE-2025-536694.3 Medium
- Show moreLoading…