Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins sonar gerrit, jenkins project sonar gerrit plugin +1 moreJenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request ForgeryCVE-2022-46688Fix available6.5 Medium
- jenkins spring config, jenkins project spring config plugin +1 moreCross-site Scripting in Jenkins Spring Config PluginCVE-2022-46687Fix available5.4 Medium
- jenkins custom build properties, jenkins project custom build properties plugin +1 moreJenkins Custom Build Properties Plugin vulnerable to Cross-site ScriptingCVE-2022-46686Fix available5.4 Medium
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreStored XSS vulnerability in Jenkins Checkmarx PluginCVE-2022-46684Fix available5.4 Medium
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin Open Redirect vulnerabilityCVE-2022-46683Fix available6.1 Medium
- jenkins plot, jenkins project plot plugin +1 moreJenkins Plot Plugin XML External Entity Reference vulnerabilityCVE-2022-46682Fix available9.8 Critical
- jenkins associated files, jenkins project associated files plugin +1 moreJenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)CVE-2022-454015.4 Medium
- jenkins japex, jenkins project japex plugin +1 moreXXE vulnerability in Jenkins JAPEX PluginCVE-2022-454009.8 Critical
- jenkins cluster statistics, jenkins project cluster statistics plugin +1 moreJenkins Cluster Statistics Plugin Missing Authorization vulnerabilityCVE-2022-453994.3 Medium
- jenkins cluster statistics, jenkins project cluster statistics plugin +1 moreCross-Site Request Forgery in Jenkins Cluster Statistics PluginCVE-2022-453984.3 Medium
- jenkins project osf builder suite : : xml linter plugin, jenkins osf builder suite \ +1 moreXXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter PluginCVE-2022-453979.8 Critical
- jenkins sourcemonitor, jenkins project sourcemonitor plugin +1 moreXXE vulnerability on agents in Jenkins SourceMonitor PluginCVE-2022-453969.8 Critical
- jenkins cccc, jenkins project cccc plugin +1 moreXML External Entity Reference in Jenkins CCCC PluginCVE-2022-453959.8 Critical
- jenkins delete log, jenkins project delete log plugin +1 moreMissing permission check in Jenkins Delete log PluginCVE-2022-453944.3 Medium
- jenkins delete log, jenkins project delete log plugin +1 moreCross-Site Request Forgery in Jenkins Delete log PluginCVE-2022-453933.5 Low
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 morePlaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher PluginCVE-2022-45392Fix available6.5 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionallyCVE-2022-45391Fix available7.5 High
- jenkins loader.io, jenkins project loader.io plugin +1 moreMissing permission check in Jenkins loader.io Plugin allows enumerating credentials IDsCVE-2022-453904.3 Medium
- jenkins xp-dev, jenkins project xp-dev plugin +1 moreMissing Authorization in Jenkins XP-Dev PluginCVE-2022-453895.3 Medium
- jenkins config rotator, jenkins project config rotator plugin +1 moreJenkins Config Rotator Plugin vulnerable to path traversalCVE-2022-453887.5 High
- jenkins bart, jenkins project bart plugin +1 moreJenkins BART Plugin vulnerable to cross-site scripting (XSS)CVE-2022-453875.4 Medium
- jenkins violations, jenkins project violations plugin +1 moreXML External Entity Reference in Jenkins Violations PluginCVE-2022-453865.5 Medium
- jenkins project cloudbees docker hub/registry notification plugin, jenkins cloudbees docker hub\/registry notification +1 moreLack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification PluginCVE-2022-45385Fix available7.5 High
- jenkins reverse proxy auth, jenkins project reverse proxy auth plugin +1 moreJenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwordsCVE-2022-45384Fix available6.5 Medium
- jenkins support core, jenkins project support core plugin +1 moreIncorrect permission checks in Jenkins Support Core PluginCVE-2022-45383Fix available6.5 Medium
- jenkins naginator, jenkins project naginator plugin +1 moreCross-site Scripting in Jenkins Naginator PluginCVE-2022-45382Fix available5.4 Medium
- jenkins pipeline utility steps, jenkins project pipeline utility steps plugin +1 moreArbitrary file read vulnerability in Jenkins Pipeline Utility Steps PluginCVE-2022-45381Fix available8.1 High
- jenkins junit, jenkins project junit plugin +1 moreJenkins JUnit Plugin subject to Cross-site Scripting via URL conversionCVE-2022-45380Fix available5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreWhole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisionsCVE-2022-45379Fix available7.5 High
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreSSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher PluginCVE-2022-386667.5 High
- jenkins 360 fireline, jenkins project 360 fireline plugin +1 moreContent-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine PluginCVE-2022-434355.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner PluginCVE-2022-43434Fix available5.3 Medium
- jenkins screenrecorder, jenkins project screenrecorder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins ScreenRecorder PluginCVE-2022-434334.3 Medium
- jenkins xframium builder, jenkins project xframium builder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins XFramium Builder PluginCVE-2022-434324.3 Medium
- jenkins compuware strobe measurement, jenkins project compuware strobe measurement plugin +1 moreJenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerabilityCVE-2022-43431Fix available4.3 Medium
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreXXE vulnerability in Jenkins Compuware Topaz for Total Test PluginCVE-2022-43430Fix available7.5 High
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreJenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism FailureCVE-2022-434297.5 High
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreAgent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test PluginCVE-2022-43428Fix available5.3 Medium
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreJenkins Compuware Topaz for Total Test Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in JenkinsCVE-2022-43427Fix available4.3 Medium
- jenkins s3 explorer, jenkins project s3 explorer plugin +1 moreAWS secrets displayed without masking by Jenkins S3 Explorer PluginCVE-2022-434265.3 Medium
- jenkins custom checkbox parameter, jenkins project custom checkbox parameter plugin +1 moreStored XSS vulnerability in Jenkins Custom Checkbox Parameter PluginCVE-2022-434255.4 Medium
- jenkins compuware xpediter code coverage, jenkins project compuware xpediter code coverage plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage PluginCVE-2022-43424Fix available5.3 Medium
- jenkins project compuware source code download for endevor, pds, and ispw plugin, jenkins compuware source code download for endevor\, pds\, and ispw +1 moreAgent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW PluginCVE-2022-43423Fix available5.3 Medium
- jenkins compuware topaz utilities, jenkins project compuware topaz utilities plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities PluginCVE-2022-43422Fix available5.3 Medium
- jenkins tuleap git branch source, jenkins project tuleap git branch source plugin +1 moreJenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified valueCVE-2022-43421Fix available5.3 Medium
- jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 moreStored XSS vulnerability in Jenkins Contrast Continuous Application Security PluginCVE-2022-43420Fix available5.4 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreAPI keys stored in plain text by Jenkins Katalon PluginCVE-2022-43419Fix available6.5 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreCSRF vulnerability in Jenkins Katalon Plugin allows capturing credentialsCVE-2022-43418Fix available4.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreMissing permission checks in Jenkins Katalon Plugin allow capturing credentialsCVE-2022-43417Fix available4.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreJenkins Katalon Plugin vulnerable to Protection Mechanism FailureCVE-2022-43416Fix available8.8 High
- Show moreLoading…