Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins distributed fork, jenkins project distfork jenkins plugin +1 moreMissing permission checks in Jenkins Distributed Fork PluginCVE-2017-2652Fix available8.8 High
- jenkins pipeline classpath step, jenkins project pipeline: classpath step jenkins plugin +1 moreJenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypassCVE-2017-26508.5 High
- jenkins active directory, jenkins project active directory jenkins plugin +1 moreJenkins Active Directory Plugin did not verify certificate of AD serverCVE-2017-2649Fix available8.1 High
- jenkins jenkins-ssh-slaves-plugin, ssh slaves +1 moreJenkins SSH Build Agents Plugin did not verify host keysCVE-2017-2648Fix available6.8 Medium
- jenkins jenkins-mailer-plugin, mailer +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-pluginCVE-2017-2651Fix available3.7 Low
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-site scripting vulnerability exists in Jenkins and Stapler PluginCVE-2018-1999007Fix available5.4 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1999006Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2018-1999005Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in JenkinsCVE-2018-1999004Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in JenkinsCVE-2018-1999003Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in JenkinsCVE-2018-1999002Public exploitFix availableEPSS 86.6%7.5 High
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in JenkinsCVE-2018-1999001Fix availableEPSS 18.1%8.8 High
- jenkins aws codebuildInsufficiently Protected Credentials in Jenkins AWS CodeBuild PluginCVE-2018-1000404Fix available7.8 High
- jenkins aws codedeployAWS CodeDeploy Plugin stored AWS Secret Key in plain textCVE-2018-1000403Fix available7.8 High
- jenkins aws codedeployJenkins AWS CodeDeploy Plugin has Insufficiently Protected CredentialsCVE-2018-1000402Fix available4.3 Medium
- jenkins aws codepipelineJenkins AWS CodePipeline Plugin has Insufficiently Protected CredentialsCVE-2018-1000401Fix available7.8 High
- jenkins configuration as codeJenkins Configuration as Code Plugin has Insufficiently Protected CredentialsCVE-2018-1000610Fix available8.8 High
- jenkins configuration as codeJenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive InformationCVE-2018-1000609Fix available6.5 Medium
- jenkins z\/os connectorJenkins z/OS Connector Plugin allows local attacker to retrieve configured passwordCVE-2018-1000608Fix available7.2 High
- jenkins fortify cloudscanArbitrary file write vulnerability in Jenkins Fortify CloudScan PluginCVE-2018-1000607Fix available6.5 Medium
- jenkins urltriggerURLTrigger Plugin server-side request forgery vulnerabilityCVE-2018-1000606Fix available6.5 Medium
- jenkins collabnetJenkins CollabNet Plugin man in the middle vulnerabilityCVE-2018-1000605Fix available7.4 High
- jenkins badgeJenkins Badge Plugin cross-site scripting vulnerabilityCVE-2018-1000604Fix available5.4 Medium
- jenkins openstack cloudCSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentialsCVE-2018-1000603Fix available8.8 High
- jenkins samlJenkins SAML Plugin Session Fixation vulnerabilityCVE-2018-1000602Fix available5.9 Medium
- jenkins ssh credentialsExposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials PluginCVE-2018-1000601Fix available6.5 Medium
- jenkins githubCSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentialsCVE-2018-1000600Fix availableEPSS 91.0%8.8 High
- jenkins groovy postbuildJenkins Groovy Postbuild Plugin vulnerable to Cross-site ScriptingCVE-2018-1000202Fix available5.4 Medium
- jenkins black duck hubXML External Entity processing vulnerability in Jenkins Black Duck Hub PluginCVE-2018-1000198Fix available6.5 Medium
- jenkins black duck hubJenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configurationCVE-2018-1000197Fix available8.1 High
- jenkins gitlab hookJenkins Gitlab Hook Plugin stores and displays GitLab API token in plain textCVE-2018-10001966.5 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in JenkinsCVE-2018-1000195Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 morePath Traversal in JenkinsCVE-2018-1000194Fix available8.1 High
- jenkins, oracle communications cloud native core automated test suite +1 moreInjection in JenkinsCVE-2018-1000193Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000192Fix available4.3 Medium
- jenkins synopsys detectJenkins Black Duck Detect Plugin information exposure vulnerabilityCVE-2018-1000191Fix available6.5 Medium
- jenkins black duck hubExposure of sensitive information vulnerability in Jenkins Black Duck Hub PluginCVE-2018-1000190Fix available6.5 Medium
- jenkins absint astreeCSRF vulnerability and missing permission checks in Jenkins AbsInt Astrée PluginCVE-2018-1000189Fix available8.8 High
- jenkins casJenkins CAS Plugin Server-Side Request Forgery vulnerabilityCVE-2018-1000188Fix available5.4 Medium
- jenkins kubernetesExposure of Sensitive Information in Jenkins Kubernetes PluginCVE-2018-1000187Fix available6.5 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin credential capture vulnerabilityCVE-2018-1000186Fix available6.5 Medium
- jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Server-Side Request ForgeryCVE-2018-1000185Fix available4.3 Medium
- jenkins githubJenkins GitHub Plugin server-side request forgery vulnerability existsCVE-2018-1000184Fix available5.4 Medium
- jenkins githubJenkins GitHub Plugin exposure of sensitive information vulnerability existsCVE-2018-1000183Fix available6.5 Medium
- jenkins gitServer-Side Request Forgery in Jenkins Git PluginCVE-2018-1000182Fix available6.4 Medium
- [unknown] jenkinsInadequate Encryption Strength in JenkinsCVE-2017-2598Fix available4.3 Medium
- [unknown] jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2609Fix available4.3 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2017-2607Fix available4.2 Medium
- [unknown] jenkinsCross-Site Request Forgery in JenkinsCVE-2017-2613Fix available5.4 Medium
- [unknown] jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2017-2610Fix available5.4 Medium
- Show moreLoading…