Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkinsAgent-to-controller access control allows reading/writing most content of build directories in JenkinsCVE-2021-21697Fix available9.1 Critical
- jenkinsAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2021-21696Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21695Fix available8.8 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21694Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21692Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21691Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21690Fix available9.8 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21689Fix available9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21688Fix available7.5 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21687Fix available9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21686Fix available8.1 High
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21685Fix available9.1 Critical
- jenkinsMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in JenkinsCVE-2021-21693Fix available9.8 Critical
- jenkins git, jenkins project git plugin +1 moreStored XSS vulnerability in Jenkins Git PluginCVE-2021-21684Fix available6.1 Medium
- jenkinsPath traversal vulnerability on Windows in JenkinsCVE-2021-21683Fix available6.5 Medium
- jenkinsImproper handling of equivalent directory names on Windows in JenkinsCVE-2021-21682Fix available4.3 Medium
- jenkins nomad, jenkins project nomad plugin +1 morePassword stored in plain text by Jenkins Nomad PluginCVE-2021-21681Fix available5.5 Medium
- jenkins nested view, jenkins project nested view plugin +1 moreXXE vulnerability in Jenkins Nested View PluginCVE-2021-21680Fix available7.1 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin allows bypassing CSRF protection for any URLCVE-2021-21679Fix available8.8 High
- jenkins saml, jenkins project saml plugin +1 moreJenkins SAML Plugin allows bypassing CSRF protection for any URLCVE-2021-21678Fix available8.8 High
- jenkins code coverage api, jenkins project code coverage api plugin +1 moreRCE vulnerability in Jenkins Code Coverage API PluginCVE-2021-21677Fix available8.8 High
- jenkins requests, jenkins project requests-plugin plugin +1 moreMissing permission check in Jenkins requests-plugin Plugin allows sending emailsCVE-2021-21676Fix available4.3 Medium
- jenkins requests, jenkins project requests-plugin plugin +1 moreCSRF vulnerabilities in Jenkins requests-plugin PluginCVE-2021-21675Fix available6.5 Medium
- jenkins requests, jenkins project requests-plugin plugin +1 moreMissing permission check in Jenkins requests-plugin Plugin allows viewing pending requestsCVE-2021-21674Fix available4.3 Medium
- jenkins cas, jenkins project cas plugin +1 moreOpen redirect vulnerability in Jenkins CAS PluginCVE-2021-21673Fix available6.1 Medium
- jenkins selenium html report, jenkins project selenium html report plugin +1 moreXXE vulnerability in Jenkins Selenium HTML report PluginCVE-2021-21672Fix availableEPSS 42.5%4.3 Medium
- jenkinsSession fixation vulnerability in JenkinsCVE-2021-21671Fix available7.5 High
- jenkinsImproper permission checks allow canceling queue items and aborting builds in JenkinsCVE-2021-21670Fix available4.3 Medium
- jenkins generic webhook trigger, jenkins project generic webhook trigger plugin +1 moreXXE vulnerability in Jenkins Generic Webhook Trigger PluginCVE-2021-21669Fix availableEPSS 25.7%9.8 Critical
- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler PluginCVE-2021-21668Fix availableEPSS 76.0%5.4 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler PluginCVE-2021-21667Fix availableEPSS 75.7%5.4 Medium
- jenkins kiuwan, jenkins project kiuwan plugin +1 moreCross-site scripting in Jenkins Kiuwan PluginCVE-2021-21666Fix available6.1 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreCSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentialsCVE-2021-21665Fix available8.8 High
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreIncorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentialsCVE-2021-21664Fix available6.5 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentialsCVE-2021-21663Fix available4.3 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDsCVE-2021-21662Fix available4.3 Medium
- jenkins kubernetes, jenkins project kubernetes cli plugin +1 moreMissing Authorization in Jenkins Kubernetes CLI PluginCVE-2021-21661Fix available4.3 Medium
- jenkins markdown formatter, jenkins project markdown formatter plugin +1 moreXSS vulnerability in Jenkins Markdown Formatter PluginCVE-2021-21660Fix available5.4 Medium
- jenkins urltrigger, jenkins project urltrigger plugin +1 moreXXE vulnerability in Jenkins URLTrigger PluginCVE-2021-21659Fix availableEPSS 66.8%8.1 High
- jenkins nuget, jenkins project nuget plugin +1 moreXML external entity vulnerability in Jenkins Nuget PluginCVE-2021-21658Fix available9.1 Critical
- jenkins filesystem trigger, jenkins project filesystem trigger plugin +1 moreXXE vulnerability in Jenkins Filesystem Trigger PluginCVE-2021-21657Fix available8.8 High
- jenkins xcode integration, jenkins project xcode integration plugin +1 moreXML external entity (XXE) attacks in Jenkins Xcode integration PluginCVE-2021-21656Fix available7.1 High
- jenkins p4, jenkins project p4 plugin +1 moreCross-Site Request Forgery in Jenkins P4 PluginCVE-2021-21655Fix available7.1 High
- jenkins p4, jenkins project p4 plugin +1 moreMissing Authorization in Jenkins P4 pluginCVE-2021-21654Fix available4.3 Medium
- jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreMissing Authorization in jenkins xray-connectorCVE-2021-21653Fix available4.3 Medium
- jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreCSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentialsCVE-2021-21652Fix available7.1 High
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreMissing Authorization in Jenkins S3 publisher PluginCVE-2021-21651Fix available4.3 Medium
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreMissing Authorization in Jenkins S3 publisher PluginCVE-2021-21650Fix available4.3 Medium
- jenkins dashboard view, jenkins project dashboard view plugin +1 moreCross-site Scripting in Jenkins Dashboard View PluginCVE-2021-21649Fix availableEPSS 72.7%5.4 Medium
- jenkins credentials, jenkins project credentials plugin +1 moreCross-Site Request Forgery in Jenkins Credentials PluginCVE-2021-21648Fix availableEPSS 11.3%6.1 Medium
- Show moreLoading…