Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin Improper certificate validation with StartTLSCVE-2019-1003009Fix available7.4 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreJenkins Warnings Next Generation Plugin cross-site request forgery vulnerabilityCVE-2019-10030088.8 High
- jenkins warnings, jenkins project warnings plugin +1 moreSandbox Bypass via CSRF in Jenkins Warnings PluginCVE-2019-1003007Fix available8.8 High
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003006Fix available8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox Bypass in Script Security PluginCVE-2019-1003005Public exploitFix availableEPSS 19.5%8.8 High
- jenkinsImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2018-1000997Fix available6.5 Medium
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003004Fix available7.2 High
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins CoreCVE-2019-1003003Fix available7.2 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Pipeline Declarative Plugin sandbox bypass vulnerabilityCVE-2019-1003002Public exploitFix availableEPSS 81.1%8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003001Public exploitFix availableEPSS 86.1%8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreProtection Mechanism Failure in Jenkins Script Security PluginCVE-2019-1003000Public exploitFix availableEPSS 98.4%8.8 High
- jenkins git changelogStored XSS vulnerability in Jenkins Git Changelog PluginCVE-2018-1000426Fix available6.1 Medium
- jenkins email extension templateCSRF vulnerability in Email Extension Template PluginCVE-2018-1000417Fix available8.1 High
- jenkins config file providerCSRF vulnerability in Config File Provider PluginCVE-2018-1000414Fix available8.1 High
- jenkins config file providerStored XSS vulnerability in Config File Provider PluginCVE-2018-1000413Fix available5.4 Medium
- jenkins jiraJenkins Jira Plugin Incorrect Authorization vulnerabilityCVE-2018-1000412Fix available8.8 High
- jenkins junitJenkins JUnit Plugin CSRF vulnerabilityCVE-2018-1000411Fix available6.5 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000410Fix available7.8 High
- jenkinsSession Fixation in JenkinsCVE-2018-1000409Fix available5.4 Medium
- jenkinsImproper Authorization in JenkinsCVE-2018-1000408Fix available6.5 Medium
- jenkinsCross-site Scripting in JenkinsCVE-2018-1000407Fix available6.1 Medium
- jenkinsPath Traversal in JenkinsCVE-2018-1000406Fix available6.5 Medium
- jenkins pipeline\, redhat openshift container platform +1 moreJenkins Script Security and Pipeline Groovy Plugins Sandbox BypassCVE-2018-1000866Fix available8.8 High
- jenkins script security, redhat openshift container platform +1 moreImproper Privilege Management in JenkinsCVE-2018-1000865Fix available8.8 High
- jenkins, redhat openshift container platform +1 moreLoop with Unreachable Exit Condition in JenkinsCVE-2018-1000864Fix available6.5 Medium
- jenkins, redhat openshift container platform +1 moreImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2018-1000863Fix available8.2 High
- jenkins, redhat openshift container platform +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000862Fix available4.3 Medium
- jenkins, jenkins stapler web framework, redhat openshift container platform +2 moreDeserialization of Untrusted Data in JenkinsCVE-2018-1000861In KEVPublic exploitFix availableEPSS 98.3%9.8 Critical
- jenkinsIncorrect Authorization in JenkinsCVE-2018-1999047Fix available6.5 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1999046Fix available4.3 Medium
- jenkinsImproper Authentication in JenkinsCVE-2018-1999045Fix available5.4 Medium
- jenkinsInfinite Loop in Jenkins CoreCVE-2018-1999044Fix available6.5 Medium
- jenkinsMissing Release of Resource after Effective Lifetime in JenkinsCVE-2018-1999043Fix available7.5 High
- jenkinsDeserialization of Untrusted Data in JenkinsCVE-2018-1999042Fix available5.3 Medium
- [unknown] jenkins-email-ext, jenkins email extension +1 moreEmails were sent to addresses not associated with actual users of Jenkins by Email Extension PluginCVE-2017-2654Fix available3.7 Low
- jenkins tinfoil securityExposure of sensitive information vulnerabilityCVE-2018-1999041Fix available5.5 Medium
- jenkins kubernetesExposure of Sensitive Information in Jenkins Kubernetes PluginCVE-2018-1999040Fix available8.8 High
- jenkins confluence publisherServer-Side Request Forgery (SSRF) in Jenkins Confluence Publisher PluginCVE-2018-1999039Fix available4.3 Medium
- jenkins publish over cifsJenkins Publisher Over CIFS Plugin confused deputy vulnerabilityCVE-2018-1999038Fix available4.2 Medium
- jenkins resource disposerJenkins Resource Disposer Plugin allows attacker to stop tracking specified resourceCVE-2018-1999037Fix available4.3 Medium
- jenkins ssh agentJenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build logCVE-2018-1999036Fix available6.5 Medium
- jenkins inedo buildmasterJenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validationCVE-2018-1999035Fix available7.4 High
- jenkins inedo progetJenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validationCVE-2018-1999034Fix available7.4 High
- jenkins meliora testlabJenkins meliora-testlab Plugin allows attackers with file system access to Jenkins master to obtain API keyCVE-2018-1999031Fix available6.5 Medium
- jenkins maven artifact choicelistprovider \(nexus\)Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checksCVE-2018-1999030Fix available5.4 Medium
- jenkins shelve projectStored Cross-Site Scripting Vulnerability in Jenkins Shelve Project PluginCVE-2018-1999029Fix available5.4 Medium
- jenkins accurevJenkins Accurev Plugin CSRF vulnerability and missing permission checksCVE-2018-1999028Fix available8.8 High
- jenkins saltstackJenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in JenkinsCVE-2018-1999027Fix available7.5 High
- jenkins tracetronic ecu-testJenkins TraceTronic ECU-TEST Plugin server-side request forgery vulnerabilityCVE-2018-1999026Fix available6.5 Medium
- jenkins tracetronic ecu-testJenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerabilityCVE-2018-1999025Fix available7.4 High
- Show moreLoading…