Jenkins Ssh vulnerabilities

• jenkins ssh-slave, jenkins project jenkins/ssh-slave docker images +1 more In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation... CVE-2025-32755 9.1 CriticalApril 10, 2025
• jenkins ssh-agent, jenkins project jenkins/ssh-agent docker images +1 more In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image... CVE-2025-32754 9.1 CriticalApril 10, 2025
• jenkins ssh2 easy, jenkins project ssh2 easy plugin +1 more Disabled permissions can be granted by Jenkins SSH2 Easy Plugin CVE-2023-41939 Fix available 8.8 HighSeptember 6, 2023
• jenkins ssh, jenkins project ssh plugin +1 more Missing Authorization in Jenkins SSH plugin CVE-2022-30959 6.5 MediumMay 17, 2022
• jenkins ssh, jenkins project ssh plugin +1 more Cross Site Request Forgery in Jenkins SSH Plugin CVE-2022-30958 8.8 HighMay 17, 2022
• jenkins ssh, jenkins project ssh plugin +1 more Missing permission check in Jenkins SSH Plugin CVE-2022-30957 4.3 MediumMay 17, 2022
• jenkins publish over ssh, jenkins project publish over ssh plugin +1 more Password stored in plain text by Jenkins Publish Over SSH Plugin CVE-2022-23114 Fix available 3.3 LowJanuary 12, 2022
• jenkins publish over ssh, jenkins project publish over ssh plugin +1 more Path traversal vulnerability in Jenkins Publish Over SSH Plugin CVE-2022-23113 Fix available 4.3 MediumJanuary 12, 2022
• jenkins publish over ssh, jenkins project publish over ssh plugin +1 more Missing permission check in Jenkins Publish Over SSH Plugin CVE-2022-23112 Fix available 6.5 MediumJanuary 12, 2022
• jenkins publish over ssh, jenkins project publish over ssh plugin +1 more CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin CVE-2022-23111 Fix available EPSS 26.5% 4.3 MediumJanuary 12, 2022
• jenkins publish over ssh, jenkins project publish over ssh plugin +1 more Stored XSS vulnerability in Jenkins Publish Over SSH Plugin CVE-2022-23110 Fix available 4.8 MediumJanuary 12, 2022
• jenkins ssh agent, jenkins project ssh agent plugin +1 more Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs CVE-2022-20620 Fix available 4.3 MediumJanuary 12, 2022
• jenkins ssh agent Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log CVE-2018-1999036 Fix available 6.5 MediumAugust 1, 2018
• jenkins jenkins-ssh-slaves-plugin, ssh slaves +1 more Jenkins SSH Build Agents Plugin did not verify host keys CVE-2017-2648 Fix available 6.8 MediumJuly 27, 2018
• jenkins ssh credentials Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin CVE-2018-1000601 Fix available 6.5 MediumJune 26, 2018
• jenkins ssh Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext CVE-2017-1000245 Fix available 9.8 CriticalNovember 1, 2017