Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreMissing permission check in Jenkins CloudBees CD Plugin allows scheduling buildsCVE-2021-21647Fix available4.3 Medium
- jenkins templating engine, jenkins project templating engine plugin +1 moreRemote code execution vulnerability in Jenkins Templating Engine PluginCVE-2021-21646Fix available8.8 High
- jenkins config file provider, jenkins project config file provider plugin +1 moreMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDsCVE-2021-21645Fix available4.3 Medium
- jenkins config file provider, jenkins project config file provider plugin +1 moreCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration filesCVE-2021-21644Fix available5.4 Medium
- jenkins config file provider, jenkins project config file provider plugin +1 moreIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDsCVE-2021-21643Fix available6.5 Medium
- jenkins config file provider, jenkins project config file provider plugin +1 moreXML External Entity Reference vulnerability in Jenkins Config File Provider PluginCVE-2021-21642Fix availableEPSS 37.8%8.1 High
- jenkins promoted builds, jenkins project promoted builds plugin +1 moreCSRF vulnerability in Jenkins promoted builds PluginCVE-2021-21641Fix available4.3 Medium
- jenkinsView name validation bypass in JenkinsCVE-2021-21640Fix available4.3 Medium
- jenkinsLack of type validation in agent related REST API in JenkinsCVE-2021-21639Fix available4.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreCSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentialsCVE-2021-216388.8 High
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreMissing permission check in Jenkins Team Foundation Server Plugin allow capturing credentialsCVE-2021-216376.5 Medium
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreMissing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDsCVE-2021-216364.3 Medium
- jenkins rest list parameter, jenkins project rest list parameter plugin +1 moreStored XSS vulnerability in Jenkins REST List Parameter PluginCVE-2021-21635Fix available5.4 Medium
- jenkins project jabber (xmpp) notifier and control plugin, jenkins jabber \(xmpp\) notifier and control +1 morePasswords stored in plain text by Jenkins Jabber (XMPP) notifier and control PluginCVE-2021-21634Fix available6.5 Medium
- jenkins owasp dependency-track, jenkins project owasp dependency-track plugin +1 moreCSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentialsCVE-2021-21633Fix available8.8 High
- jenkins owasp dependency-track, jenkins project owasp dependency-track plugin +1 moreMissing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentialsCVE-2021-21632Fix available6.5 Medium
- jenkins cloud statistics, jenkins project cloud statistics plugin +1 moreMissing permission check in Jenkins Cloud Statistics PluginCVE-2021-21631Fix available4.3 Medium
- jenkins extra columns, jenkins project extra columns plugin +1 moreStored XSS vulnerability in Jenkins Extra Columns PluginCVE-2021-21630Fix availableEPSS 68.9%5.4 Medium
- jenkins build with parameters, jenkins project build with parameters plugin +1 moreCSRF vulnerability in Jenkins Build With Parameters PluginCVE-2021-21629Fix available8.8 High
- jenkins build with parameters, jenkins project build with parameters plugin +1 moreStored XSS vulnerability in Jenkins Build With Parameters PluginCVE-2021-21628Fix availableEPSS 79.1%5.4 Medium
- jenkins libvirt agents, jenkins project libvirt agents plugin +1 moreCSRF vulnerability in Jenkins Libvirt Agents PluginCVE-2021-21627Fix available8.8 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreMissing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contentsCVE-2021-21626Fix available4.3 Medium
- jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 moreMissing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDsCVE-2021-21625Fix available4.3 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreIncorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some itemsCVE-2021-21624Fix available4.3 Medium
- jenkins matrix authorization strategy, jenkins project matrix authorization strategy plugin +1 moreIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some itemsCVE-2021-21623Fix available6.5 Medium
- jenkins artifact repository parameter, jenkins project artifact repository parameter plugin +1 moreStored XSS vulnerability in Jenkins Artifact Repository Parameter PluginCVE-2021-21622Fix available5.4 Medium
- jenkins support core, jenkins project support core plugin +1 moreSupport bundles can include user session IDs in Jenkins Support Core PluginCVE-2021-21621Fix available5.3 Medium
- jenkins claim, jenkins project claim plugin +1 moreCross-Site Request Forgery in the Jenkins Claim pluginCVE-2021-21620Fix available4.3 Medium
- jenkins claim, jenkins project claim plugin +1 moreXSS vulnerability in Jenkins Claim PluginCVE-2021-21619Fix available5.4 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreStored XSS vulnerability in Jenkins Repository Connector PluginCVE-2021-21618Fix availableEPSS 79.5%5.4 Medium
- jenkins configuration slicing, jenkins project configuration slicing plugin +1 moreCSRF vulnerability in Jenkins Configuration Slicing PluginCVE-2021-21617Fix available8.8 High
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices PluginCVE-2021-21616Fix availableEPSS 76.2%4.6 Medium
- jenkinsTime-of-check Time-of-use (TOCTOU) Race Condition in JenkinsCVE-2021-21615Fix available5.3 Medium
- jenkins bumblebee hp alm, jenkins project bumblebee hp alm plugin +1 moreCredentials stored in plain text by Jenkins Bumblebee HP ALM PluginCVE-2021-21614Fix available5.5 Medium
- jenkins tics, jenkins project tics plugin +1 moreXSS vulnerability in Jenkins TICS PluginCVE-2021-21613Fix available6.1 Medium
- jenkins tracetronic ecu-test, jenkins project tracetronic ecu-test plugin +1 moreCredentials stored in plain text by Jenkins TraceTronic ECU-TEST PluginCVE-2021-21612Fix available5.5 Medium
- jenkinsStored XSS vulnerability in Jenkins on new item pageCVE-2021-21611Fix available5.4 Medium
- jenkinsReflected XSS vulnerability in Jenkins markup formatter previewCVE-2021-21610Fix available6.1 Medium
- jenkinsMissing permission check for paths with specific prefix in JenkinsCVE-2021-21609Fix available5.3 Medium
- jenkinsStored XSS vulnerability in Jenkins button labelsCVE-2021-21608Fix available5.4 Medium
- jenkinsExcessive memory allocation in graph URLs leads to denial of service in JenkinsCVE-2021-21607Fix available6.5 Medium
- jenkinsArbitrary file existence check in file fingerprints in JenkinsCVE-2021-21606Fix available4.3 Medium
- jenkinsPath traversal vulnerability in Jenkins agent namesCVE-2021-21605Fix available8.0 High
- jenkinsImproper handling of REST API XML deserialization errors in JenkinsCVE-2021-21604Fix available8.0 High
- jenkinsXSS vulnerability in Jenkins notification barCVE-2021-21603Fix available5.4 Medium
- jenkinsArbitrary file read vulnerability in workspace browsers in JenkinsCVE-2021-21602Fix available6.5 Medium
- jenkins cvs, jenkins project cvs plugin +1 moreXXE vulnerability in Jenkins CVS PluginCVE-2020-2324Fix available7.5 High
- jenkins shelve project, jenkins project shelve project plugin +1 moreCSRF vulnerability in Jenkins Shelve Project PluginCVE-2020-2321Fix available8.1 High
- jenkins installation manager tool, jenkins project plugin installation manager tool +1 moreJenkins Plugin Installation Manager Tool did not verify plugin downloadsCVE-2020-2320Fix available9.8 Critical
- Show moreLoading…