Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkinsImproper Authentication in JenkinsCVE-2017-1000354Fix available8.8 High
- jenkins, oracle communications cloud native core automated test suite +1 moreDeserialization of Untrusted Data in JenkinsCVE-2017-1000353In KEVPublic exploitFix availableEPSS 99.7%9.8 Critical
- jenkins delivery pipelineJenkins Delivery Pipeline Plugin Cross-site Scripting vulnerabilityCVE-2017-1000404Fix available6.1 Medium
- jenkins speaks\!Arbitrary code execution vulnerability in Jenkins Speaks! PluginCVE-2017-10004038.8 High
- jenkins swarmJenkins Swarm Plugin Client vulnerable to man-in-the-middle attacksCVE-2017-1000402Fix available5.9 Medium
- jenkinsImproper Input Validation in JenkinsCVE-2017-1000401Fix available2.2 Low
- jenkinsMissing Authorization in JenkinsCVE-2017-1000400Fix available4.3 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-1000399Fix available4.3 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-1000398Fix available4.3 Medium
- jenkins mavenMitM on Jenkins Maven PluginCVE-2017-1000397Fix available5.9 Medium
- jenkinsImproper Certificate Validation in JenkinsCVE-2017-1000396Fix available5.9 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-1000395Fix available4.3 Medium
- jenkinsImproper Input Validation in JenkinsCVE-2017-1000394Fix available7.5 High
- jenkinsOS Command Injection in JenkinsCVE-2017-1000393Fix available8.8 High
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2017-1000392Fix available4.8 Medium
- jenkinsImproper Input Validation in JenkinsCVE-2017-1000391Fix available7.3 High
- jenkins multijobJenkins Multijob plugin did not check permissions in the Resume Build actionCVE-2017-1000390Fix available4.3 Medium
- jenkins global-build-statsCross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats pluginCVE-2017-1000389Fix available6.1 Medium
- jenkins dependency graph viewerJenkins Dependency Graph Viewer plugin vulnerable to missing permission checksCVE-2017-1000388Fix available4.3 Medium
- jenkins build-publisherJenkins Build-Publisher plugin has Insufficiently Protected CredentialsCVE-2017-1000387Fix available7.8 High
- jenkins active choicesCross-site Scripting in Jenkins Active Choices pluginCVE-2017-1000386Fix available5.4 Medium
- jenkins script securityExposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security PluginCVE-2017-1000505Fix available6.5 Medium
- jenkinsCross-Site Request Forgery in JenkinsCVE-2017-1000504Fix available8.1 High
- jenkinsRace Condition in JenkinsCVE-2017-1000503Fix available8.1 High
- jenkins ec2Arbitrary shell command execution in Jenkins EC2 PluginCVE-2017-1000502Fix available8.8 High
- jenkins pipeline nodes and processesIncorrect permission checks in Pipeline: Nodes and Processes pluginCVE-2018-1000015Fix available4.8 Medium
- jenkins translation assistanceCSRF vulnerability in Jenkins Translation Assistance pluginCVE-2018-1000014Fix available8.8 High
- jenkins releaseCSRF vulnerability in Jenkins Release pluginCVE-2018-1000013Fix available8.8 High
- jenkins warningsXXE vulnerability Jenkins Warnings PluginCVE-2018-1000012Fix available8.8 High
- jenkins findbugsXML External Entity Reference in Jenkins FindBugs PluginCVE-2018-10000118.8 High
- jenkins dryXXE vulnerability in Jenkins DRY PluginCVE-2018-1000010Fix available8.8 High
- jenkins checkstyleXXE vulnerability in Jenkins Checkstyle PluginCVE-2018-1000009Fix available8.8 High
- jenkins pmdXXE vulnerability in Jenkins PMD PluginCVE-2018-1000008Fix available8.8 High
- jenkinsCross-site Scripting in Jenkins CoreCVE-2017-17383Fix available4.7 Medium
- jenkins sshJenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintextCVE-2017-1000245Fix available9.8 Critical
- jenkins favoriteJenkins Favorite Plugin vulnerable to Cross-Site Request ForgeryCVE-2017-1000244Fix available8.8 High
- jenkins favorite pluginMissing permission check in Jenkins Favorite PluginCVE-2017-1000243Fix available4.3 Medium
- jenkins git clientInsecure temporary file usage in Jenkins Git Client PluginCVE-2017-1000242Fix available3.3 Low
- jenkins datadogExposure of Sensitive Information in Jenkins Datadog pluginCVE-2017-1000114Fix available3.1 Low
- jenkins deployJenkins Deploy to container Plugin stored plain text passwords in job configurationCVE-2017-1000113Fix available5.5 Medium
- jenkins blue oceanImproper Authentication in Jenkins Blue Ocean PluginCVE-2017-1000110Fix available4.3 Medium
- jenkins owasp dependency-checkPersistent XSS vulnerability in Jenkins OWASP Dependency-Check PluginCVE-2017-1000109Fix available6.1 Medium
- jenkins pipeline-input-stepJenkins Pipeline: Input Step PluginCVE-2017-1000108Fix available7.5 High
- jenkins script securitySandbox bypass in Jenkins Script Security Plugin sandbox bypassCVE-2017-1000107Fix available8.8 High
- jenkins blue oceanImproper Authentication in Jenkins Blue Ocean PluginCVE-2017-1000106Fix available8.5 High
- jenkins blue oceanMissing Authorization in Jenkins Blue Ocean PluginCVE-2017-10001055.3 Medium
- jenkins config file providerImproper Privilege Management in Jenkins Config File Provider PluginCVE-2017-1000104Fix available6.5 Medium
- jenkins dryPersistent XSS vulnerability in Jenkins DRY PluginCVE-2017-1000103Fix available5.4 Medium
- jenkins static analysis utilitiesPersistent XSS vulnerability in Static Analysis UtilitiesCVE-2017-1000102Fix available5.4 Medium
- jenkins pipeline\Arbitrary code execution due to incomplete sandbox protection in Jenkins PipelineCVE-2017-1000096Fix available8.8 High
- Show moreLoading…