Jenkins Cloudbees vulnerabilities

• jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 more Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting CVE-2025-47885 Fix available 8.8 HighMay 14, 2025
• jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 more Jenkins CloudBees CD Plugin vulnerable to arbitrary file read CVE-2023-46655 Fix available 6.5 MediumOctober 25, 2023
• jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 more Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion CVE-2023-46654 Fix available 8.1 HighOctober 25, 2023
• jenkins project cloudbees docker hub/registry notification plugin, jenkins cloudbees docker hub\/registry notification +1 more Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin CVE-2022-45385 Fix available 7.5 HighNovember 15, 2022
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more Missing permission checks in AWS Credentials Plugin CVE-2022-27199 Fix available 4.3 MediumMarch 15, 2022
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin CVE-2022-27198 8.0 HighMarch 15, 2022
• jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 more Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds CVE-2021-21647 Fix available 4.3 MediumApril 21, 2021
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs CVE-2021-21625 Fix available 4.3 MediumMarch 18, 2021
• jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 more Incorrect permission check in Health Advisor by CloudBees Plugin CVE-2020-2258 Fix available 4.3 MediumSeptember 16, 2020
• cloudbees jenkins, jenkins cloudbees, cloudbees jenkins lts +2 more XML external entity (XXE) vulnerability in Jenkins CVE-2015-1811 Fix available 7.5 HighJanuary 15, 2020
• cloudbees jenkins, jenkins cloudbees, cloudbees jenkins lts +2 more XML external entity (XXE) vulnerability in Jenkins CVE-2015-1809 Fix available 7.5 HighJanuary 15, 2020
• jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 more Missing permission checks in Health Advisor by CloudBees Plugin CVE-2020-2094 Fix available 4.3 MediumJanuary 15, 2020
• jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 more CSRF vulnerability in Health Advisor by CloudBees Plugin CVE-2020-2093 Fix available 8.8 HighJanuary 15, 2020