Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins aws cloudwatch logs publisher, jenkins project aws cloudwatch logs publisher plugin +1 moreJenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain textCVE-2019-10030628.8 High
- jenkins jenkins-cloudformation-plugin, jenkins project jenkins-cloudformation-plugin plugin +1 moreJenkins CloudFormation Plugin stores credentials in plain textCVE-2019-10030618.8 High
- jenkins official owasp zap, jenkins project official owasp zap plugin +1 moreJenkins OWASP ZAP Plugin stores unencrypted credentialsCVE-2019-10030608.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreMissing permission check in Jenkins FTP publisher PluginCVE-2019-10030596.5 Medium
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreCSRF vulnerability in Jenkins FTP publisher PluginCVE-2019-10030586.5 Medium
- jenkins bitbucket approve, jenkins project bitbucket approve plugin +1 moreJenkins Bitbucket Approve Plugin stores credentials in plain textCVE-2019-10030578.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin stores credentials in plain textCVE-2019-10030568.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreJenkins FTP publisher Plugin stores credentials in plain textCVE-2019-10030558.8 High
- jenkins jira issue updater, jenkins project jira issue updater plugin +1 moreJenkins Jira Issue Updater Plugin stores credentials in plain textCVE-2019-10030548.8 High
- jenkins hockeyapp, jenkins project hockeyapp plugin +1 moreJenkins HockeyApp Plugin stores credentials in plain textCVE-2019-10030538.8 High
- jenkins aws elastic beanstalk publisher, jenkins project aws elastic beanstalk publisher plugin +1 moreJenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain textCVE-2019-10030528.8 High
- jenkins irc, jenkins project irc plugin +1 moreJenkins IRC Plugin stores credentials in plain textCVE-2019-10030518.8 High
- jenkins prqa, jenkins project prqa plugin +1 moreJenkins PRQA Plugin stored password in plain textCVE-2019-1003048Fix available7.8 High
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreSSRF vulnerability due to missing permission check in Fortify on Demand Uploader PluginCVE-2019-1003047Fix available6.5 Medium
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreJenkins Fortify on Demand Uploader Plugin CSRF vulnerabilityCVE-2019-1003046Fix available6.5 Medium
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin CSRF vulnerability and missing permission checksCVE-2019-1003044Fix available7.1 High
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin missing permission checkCVE-2019-1003043Fix available7.5 High
- jenkins lockable resources, jenkins project lockable resources plugin +1 moreJenkins Lockable Resources Plugin XSS vulnerabilityCVE-2019-1003042Fix available5.4 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041Fix available9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-1003040Fix available9.8 Critical
- jenkins appdynamics, jenkins project jenkinsappdynamics dashboard plugin +1 moreJenkins AppDynamics Dashboard Plugin has insufficiently protected credentialsCVE-2019-1003039Fix available8.8 High
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin has insufficiently protected credentialsCVE-2019-1003038Fix available7.8 High
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreUnprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents PluginCVE-2019-1003037Fix available6.5 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreMissing permission check in Azure VM Agents Plugin allowed modifying VM configurationCVE-2019-1003036Fix available4.3 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreInformation disclosure in Azure VM Agents PluginCVE-2019-1003035Fix available4.3 Medium
- jenkins job dsl, jenkins project job dsl plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Jenkins Job DSL PluginCVE-2019-1003034Fix available9.9 Critical
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003033Fix available8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreScript security sandbox bypass in Jenkins Email Extension PluginCVE-2019-1003032Fix available9.9 Critical
- jenkins matrix project, jenkins project matrix project plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Matrix Project PluginCVE-2019-1003031Fix available9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy PluginCVE-2019-1003030In KEVPublic exploitFix availableEPSS 97.1%9.9 Critical
- jenkins script security plugin, script security, redhat openshift container platform +2 moreSandbox bypass in Script Security PluginCVE-2019-1003029In KEVPublic exploitFix availableEPSS 74.4%9.9 Critical
- jenkins jms messaging, jenkins project jms messaging plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins JMS Messaging PluginCVE-2019-1003028Fix available4.3 Medium
- jenkins octopusdeploy, jenkins project octopusdeploy plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins OctopusDeploy PluginCVE-2019-1003027Fix available4.3 Medium
- jenkins mattermost, jenkins project mattermost notification plugin +1 moreJenkins Mattermost Notification Plugin vulnerable to SSRFCVE-2019-1003026Fix available4.3 Medium
- jenkins cloud foundry, jenkins project cloud foundry plugin +1 moreJenkins Cloud Foundry Plugin vulnerable to exposure of sensitive informationCVE-2019-1003025Fix available8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreJenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2019-1003024Fix available8.8 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreXSS vulnerability in Jenkins Warnings Next Generation PluginCVE-2019-1003023Fix available6.1 Medium
- jenkins monitoring, jenkins project monitoring plugin +1 moreJenkins Monitoring Plugin vulnerable to Denial of service vulnerabilityCVE-2019-1003022Fix available6.5 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration formCVE-2019-1003021Fix available4.3 Medium
- jenkins kanboard, jenkins project kanboard plugin +1 moreJenkins Kanboard Plugin vulnerable to Server-side request forgery (SSRF)CVE-2019-1003020Fix available4.3 Medium
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin session fixation vulnerabilityCVE-2019-1003019Fix available5.9 Medium
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin showed plain text client secret in configuration formCVE-2019-1003018Fix available4.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin CSRF vulnerabilityCVE-2019-1003017Fix available5.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin vulnerable to exposure of sensitive informationCVE-2019-1003016Fix available8.8 High
- jenkins job import, jenkins project job import plugin +1 moreXXE vulnerability in Jenkins Job Import PluginCVE-2019-1003015Fix available9.1 Critical
- jenkins config file provider, jenkins project config file provider plugin, redhat openshift container platform +2 moreJenkins Config File Provider Plugin XSS vulnerabilityCVE-2019-1003014Fix available4.8 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-site Scripting in Jenkins Blue Ocean PluginCVE-2019-1003013Fix available5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-Site Request Forgery in Jenkins Blue Ocean PluginCVE-2019-1003012Fix available6.5 Medium
- jenkins token macro, jenkins project token macro plugin, redhat openshift container platform +2 moreJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoSCVE-2019-1003011Fix available8.1 High
- jenkins git, redhat openshift container platform +1 moreCross-Site Request Forgery in Jenkins Git PluginCVE-2019-1003010Fix available4.3 Medium
- Show moreLoading…