Skip to content

Jenkins Jira vulnerabilities

jenkins redpen - pipeline reporter for jira, jenkins project redpen - pipeline reporter for jira plugin +1 moreJenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerabilityCVE-2025-676434.3 MediumDecember 10, 2025
jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin, jenkins google compute engine +2 more +4 moreJenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-49673Fix available8.8 HighNovember 29, 2023
jenkins jira, jenkins project jira plugin +1 moreJenkins Jira Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-49653Fix available6.5 MediumNovember 29, 2023
jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreCleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps PluginCVE-2023-244405.5 MediumJanuary 24, 2023
jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 morePlaintext Storage of a Password in Jenkins JIRA Pipeline Steps PluginCVE-2023-244395.5 MediumJanuary 24, 2023
jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreMissing permissions check in Jenkins JIRA Pipeline Steps PluginCVE-2023-244386.5 MediumJanuary 24, 2023
jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreCross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps PluginCVE-2023-244378.8 HighJanuary 24, 2023
jenkins jira, jenkins project jira plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Jira PluginCVE-2022-29041Fix available5.4 MediumApril 12, 2022
jenkins jiratestresultreporter, jenkins project jiratestresultreporter plugin +1 moreMissing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28137Fix available4.3 MediumMarch 29, 2022
jenkins jiratestresultreporter, jenkins project jiratestresultreporter plugin +1 moreCSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28136Fix available8.8 HighMarch 29, 2022
jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreMissing Authorization in jenkins xray-connectorCVE-2021-21653Fix available4.3 MediumMay 11, 2021
jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreCSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentialsCVE-2021-21652Fix available7.1 HighMay 11, 2021
jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreMissing permission checks in Zephyr for JIRA Test Management PluginCVE-2020-22164.3 MediumJuly 2, 2020
jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreCSRF vulnerability in Jenkins Zephyr for JIRA Test Management PluginCVE-2020-22154.3 MediumJuly 2, 2020
jenkins zephyr for jira test management, jenkins project zephyr for jira test management plugin +1 moreJenkins Zephyr for JIRA Test Management Plugin stores credentials in plain textCVE-2020-21545.5 MediumMarch 9, 2020
jenkins jira, jenkins project jira plugin +1 moreJenkins JIRA Plugin allows users to select and use credentials with System scopeCVE-2019-16541Fix available9.9 CriticalNovember 21, 2019
jenkins jira-ext, jenkins project jira-ext plugin +1 moreJenkins jira-ext Plugin stores credentials unencryptedCVE-2019-10302Fix available8.8 HighApril 18, 2019
jenkins jira issue updater, jenkins project jira issue updater plugin +1 moreJenkins Jira Issue Updater Plugin stores credentials in plain textCVE-2019-10030548.8 HighApril 4, 2019
jenkins jiraJenkins Jira Plugin Incorrect Authorization vulnerabilityCVE-2018-1000412Fix available8.8 HighJanuary 9, 2019