Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)CVE-2015-1813Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Cross-site Scripting vulnerabilityCVE-2015-1812Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins does not Restrict Reserved Names Allowing for Privilege EscalationCVE-2015-1810Fix available4.6 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Denial of Service (DoS)CVE-2015-1808Fix available3.5 Low
- jenkins, redhat openshift +1 moreDirectory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote...CVE-2015-18073.5 Low
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2015-1806Fix available6.5 Medium
- jenkinsJenkins allows attackers to obtain sensitive informationCVE-2014-2068Fix available3.5 Low
- jenkinsJenkins session fixation vulnerabilityCVE-2014-2066Fix available6.8 Medium
- jenkinsJenkins cross-site scripting (XSS) vulnerabilityCVE-2014-2065Fix available4.3 Medium
- jenkinsJenkins allows attackers to determine whether a user existsCVE-2014-2064Public exploitFix available5.0 Medium
- jenkinsJenkins Vulnerable to ClickjackingCVE-2014-2063Fix available7.5 High
- jenkinsJenkins does not invalidate the API token when a user is deletedCVE-2014-2062Fix available6.5 Medium
- jenkinsJenkin allows attackers to obtain passwords by reading the HTML source codeCVE-2014-2061Fix available5.0 Medium
- jenkinsJenkins allows Remote Attackers to Hijack SessionsCVE-2014-2060Fix available5.0 Medium
- jenkinsJenkins allows attackers to execute arbitrary jobsCVE-2014-2058Fix available6.5 Medium
- jenkinsJenkins allows attackers to configure restricted projectsCVE-2013-7330Fix available4.0 Medium
- jenkins, redhat openshift +1 moreJenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3680Fix available4.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows Remote Users to Obtain Sensitive Information from a Plugin CodeCVE-2014-3667Fix available4.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows for Code Execution via Crafted Packet to the CLICVE-2014-3666Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobsCVE-2014-3663Fix available6.0 Medium
- jenkins, redhat openshift +1 moreJenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3662Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins Denial of Service vulnerabilityCVE-2014-3661Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins Cross-site Scripting vulnerabilityCVE-2014-3681Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Path Traversal vulnerabilityCVE-2014-3664Fix available4.0 Medium
- cloudbees jenkinsJenkins vulnerable to Cross-site ScriptingCVE-2013-2033Fix available2.1 Low
- jenkinsJenkins cross-site scripting (XSS) vulnerabilityCVE-2014-2067Fix available3.5 Low
- jenkinsJenkins directory traversal vulnerabilityCVE-2014-2059Fix available6.5 Medium
- jenkinsJenkins allows Cross-Site Scripting (XSS) in User ConfigurationCVE-2013-5573Public exploit4.3 Medium
- jenkinsJenkins Vulnerable to Denial of Service (DoS) via Crafted PayloadCVE-2013-0331Fix available4.0 Medium
- jenkinsJenkins allows Remote Users to Build Arbitrary JobsCVE-2013-0330Fix available4.0 Medium
- jenkinsJenkins Cross-Site Request Forgery vulnerabilityCVE-2013-0329Fix available7.5 High
- jenkinsJenkins subject to Cross-site ScriptingCVE-2013-0328Fix available4.3 Medium
- jenkinsJenkins Cross-Site Request Forgery vulnerabilityCVE-2013-0327Fix available6.8 Medium
- cloudbees jenkinsJenkins allows attackers to obtain the master cryptographic keyCVE-2013-0158Fix available2.6 Low
- cloudbees jenkinsJenkins allows Cross-Site Scripting (XSS)CVE-2012-6074Fix available3.5 Low
- cloudbees jenkinsJenkins affected by Open Redirect VulnerabilityCVE-2012-6073Fix available5.8 Medium
- cloudbees jenkinsJenkins allows HTTP Injection and Response SplittingCVE-2012-6072Fix available4.3 Medium
- cloudbees jenkinsJenkins allows Cross-Site Scripting (XSS)CVE-2012-0325Fix available4.3 Medium
- cloudbees jenkinsJenkins allows Cross-Site Scripting (XSS)CVE-2012-0324Fix available4.3 Medium
- jenkinsJenkins allows Cross-Site Scripting (XSS)CVE-2011-4344Fix available2.6 Low