Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- [unknown] jenkinsImproper Authentication in JenkinsCVE-2017-2604Fix available4.3 Medium
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2603Fix available2.6 Low
- [unknown] jenkinsIncomplete List of Disallowed Inputs in JenkinsCVE-2017-2602Fix available3.1 Low
- [unknown] jenkinsIncorrect Permission Assignment for Critical Resource in JenkinsCVE-2017-2612Fix available5.4 Medium
- [unknown] jenkinsDeserialization of Untrusted Data in JenkinsCVE-2017-2608Fix available8.8 High
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2600Fix available4.3 Medium
- jenkinsCross-site Scripting in JenkinsCVE-2017-2601Fix available6.1 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2606Fix available4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2017-2611Fix available4.3 Medium
- jenkins s3 publisherStored XSS vulnerability in Jenkins S3 Publisher PluginCVE-2018-1000177Fix available5.4 Medium
- jenkins email extensionJenkins Email Extension Plugin showed plain text SMTP password in configuration form fieldCVE-2018-1000176Fix available6.5 Medium
- jenkins html publisherJenkins HTML Publisher Plugin path traversal vulnerabilityCVE-2018-1000175Fix available6.5 Medium
- jenkins google loginJenkins Google Login Plugin Open Redirect vulnerabilityCVE-2018-1000174Fix available6.1 Medium
- jenkins google loginJenkins Google Login Plugin Session Fixation vulnerabilityCVE-2018-1000173Fix available5.9 Medium
- jenkinsCross-site Scripting in Jenkins CoreCVE-2018-1000170Fix available5.4 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000169Fix available5.3 Medium
- [unknown] jenkinsIncorrect Authorization in JenkinsCVE-2017-2599Fix available5.4 Medium
- jenkins vsphereJenkins vSphere Plugin Cross-Site Request Forgery vulnerabilityCVE-2018-1000153Fix available8.8 High
- jenkins vsphereJenkins vSphere Plugin incorrect authorization vulnerabilityCVE-2018-1000152Fix available6.3 Medium
- jenkins vsphereJenkins vSphere Plugin disables SSL/TLS certificate validation by defaultCVE-2018-1000151Fix available5.6 Medium
- jenkins reverse proxy authJenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in usersCVE-2018-1000150Fix available3.3 Low
- jenkins ansibleJenkins Ansible Plugin man in the middle vulnerabilityCVE-2018-1000149Fix available5.6 Medium
- jenkins copy to slaveJenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file systemCVE-2018-10001486.5 Medium
- jenkins liquibase runnerLiquibase Runner Plugin allows users to load arbitrary Java code into controller JVMCVE-2018-1000146Fix available8.8 High
- jenkins perforceJenkins Perforce Plugin uses ineffective credentials encryptionCVE-2018-10001456.5 Medium
- jenkins cucumber living documentationJenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerabilityCVE-2018-1000144Fix available6.1 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder PluginCVE-2018-1000143Fix available6.7 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentialsCVE-2018-1000142Fix available7.8 High
- jenkins mailerCross-Site Request Forgery in Jenkins Mailer PluginCVE-2018-8718Public exploitFix available8.0 High
- jenkins promoted buildsJenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processesCVE-2018-1000114Fix available4.3 Medium
- jenkins testlinkStored cross-site scripting vulnerability in Jenkins TestLink PluginCVE-2018-1000113Fix available5.4 Medium
- jenkins mercurialIncorrect Authorization in Jenkins Mercurial PluginCVE-2018-1000112Fix available5.3 Medium
- jenkins subversionJenkins Subversion Plugin Incorrect Authorization vulnerabilityCVE-2018-1000111Fix available5.3 Medium
- jenkins gitIncorrect Authorization in Jenkins Git PluginCVE-2018-1000110Fix available5.3 Medium
- jenkins google-play-android-publisherJenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDsCVE-2018-1000109Fix available4.3 Medium
- jenkins cppncssReflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS PluginCVE-2018-1000108Fix available6.1 Medium
- jenkins job and node ownershipImproper authorization in Jenkins Job and Node Ownership PluginCVE-2018-1000107Fix available6.5 Medium
- jenkins gerrit triggerIncorrect Authorization in Jenkins Gerrit Trigger PluginCVE-2018-1000106Fix available5.4 Medium
- jenkins gerrit triggerIncorrect Authorization in Jenkins Gerrit Trigger PluginCVE-2018-1000105Fix available4.3 Medium
- jenkins coverityJenkins Coverity Plugin has Insufficiently Protected CredentialsCVE-2018-1000104Fix available7.8 High
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2018-6356Fix available6.5 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000068Fix available5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreServer-Side Request Forgery in JenkinsCVE-2018-1000067Fix available5.3 Medium
- jenkins pipeline supporting apisArbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs PluginCVE-2018-1000058Fix available8.8 High
- jenkins credentials bindingJenkins Credentials Binding Plugin has Insufficiently Protected CredentialsCVE-2018-1000057Fix available4.3 Medium
- jenkins junitImproper Restriction of XML External Entity Reference in Jenkins JUnit PluginCVE-2018-1000056Fix available8.3 High
- jenkins android lintXXE vulnerability in Jenkins Android Lint PluginCVE-2018-1000055Fix available8.3 High
- jenkins ccmJenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2018-1000054Fix available8.3 High
- jenkinsCross-Site Request Forgery in JenkinsCVE-2017-1000356Fix available8.8 High
- jenkinsDeserialization of Untrusted Data in JenkinsCVE-2017-1000355Fix available6.5 Medium
- Show moreLoading…