Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins orka by macstadium, jenkins project orka by macstadium plugin +1 moreJenkins Orka by MacStadium Plugin missing permission checkCVE-2023-37949Fix available7.1 High
- jenkins cloud infrastructure compute, jenkins project oracle cloud infrastructure compute plugin +1 moreJenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validationCVE-2023-37948Fix available3.7 Low
- jenkins openshift login, jenkins project openshift login plugin +1 moreJenkins OpenShift Login Plugin vulnerable to Open RedirectCVE-2023-37947Fix available6.1 Medium
- jenkins openshift login, jenkins project openshift login plugin +1 moreJenkins OpenShift Login Plugin session fixation vulnerabilityCVE-2023-37946Fix available8.8 High
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin missing permission checkCVE-2023-37945Fix available4.3 Medium
- jenkins datadog, jenkins project datadog plugin +1 moreJenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.CVE-2023-37944Fix available6.5 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin vulnerable to Active Directory credential disclosureCVE-2023-37943Fix available5.9 Medium
- jenkins external monitor job type, jenkins project external monitor job type plugin +1 moreJenkins External Monitor Job Type Plugin XML external entity vulnerabilityCVE-2023-37942Fix available6.5 Medium
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin does not perform permission checks in methods implementing form validationCVE-2023-3315Fix available4.3 Medium
- jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 moreJenkins Digital.ai App Management Publisher Plugin missing permission checksCVE-2023-351496.5 Medium
- jenkins digital.ai app management publisher, jenkins project digital.ai app management publisher plugin +1 moreJenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-351486.5 Medium
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreArbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger PluginCVE-2023-351476.5 Medium
- jenkins template workflows, jenkins project template workflows plugin +1 moreJenkins Template Workflows Plugin vulnerable to Stored Cross-site ScriptingCVE-2023-351465.4 Medium
- jenkins sonargraph integration, jenkins project sonargraph integration plugin +1 moreJenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site ScriptingCVE-2023-351455.4 Medium
- jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server PluginCVE-2023-351445.4 Medium
- jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server PluginCVE-2023-351435.4 Medium
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreSSL/TLS certificate validation disabled by default in Jenkins Checkmarx PluginCVE-2023-35142Fix available8.1 High
- jenkinsJenkins CSRF protection bypass vulnerabilityCVE-2023-35141Fix available8.0 High
- jenkins code dx, code dx plugin +1 moreCSRF vulnerability and missing permission checks in Code Dx PluginCVE-2023-2631Fix available4.3 Medium
- jenkins code dx, code dx plugin +1 moreCSRF vulnerability and missing permission checks in Code Dx PluginCVE-2023-2195Fix available4.3 Medium
- jenkins code dx, code dx plugin +1 moreAPI keys stored and displayed in plain text by Code Dx PluginCVE-2023-2633Fix available4.3 Medium
- jenkins code dx, code dx plugin +1 moreAPI keys stored and displayed in plain text by Code Dx PluginCVE-2023-2632Fix available4.3 Medium
- jenkins code dx, code dx plugin +1 moreMissing permission checks in Code Dx PluginCVE-2023-2196Fix available4.3 Medium
- jenkins loadcomplete support, jenkins project loadcomplete support plugin +1 moreJenkins LoadComplete support Plugin Cross-site Scripting vulnerabilityCVE-2023-330075.4 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin cross-site request forgery vulnerabilityCVE-2023-330065.4 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin Session Fixation vulnerabilityCVE-2023-330055.4 Medium
- jenkins tag profiler, jenkins project tag profiler plugin +1 moreJenkins Tag Profiler Plugin missing permission checkCVE-2023-330044.3 Medium
- jenkins tag profiler, jenkins project tag profiler plugin +1 moreJenkins Tag Profiler Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-330034.3 Medium
- jenkins testcomplete support, jenkins project testcomplete support plugin +1 moreTestComplete support Plugin vulnerable to stored Cross-site ScriptingCVE-2023-330025.4 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin has improper masking of credentialsCVE-2023-330017.5 High
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin displays credentials without maskingCVE-2023-33000Fix available7.5 High
- jenkins appspider, jenkins project appspider plugin +1 moreJenkins AppSpider Plugin missing permission checkCVE-2023-32999Fix available4.3 Medium
- jenkins appspider, jenkins project appspider plugin +1 moreJenkins AppSpider Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32998Fix available8.8 High
- jenkins cas, jenkins project cas plugin +1 moreJenkins CAS Plugin Session Fixation vulnerabilityCVE-2023-32997Fix available8.8 High
- jenkins project saml single sign on(sso) plugin, jenkins saml single sign-on +1 moreJenkins SAML Single Sign On(SSO) Plugin missing permission checksCVE-2023-32996Fix available4.3 Medium
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32995Fix available8.8 High
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validationCVE-2023-32994Fix available3.7 Low
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin missing hostname validationCVE-2023-32993Fix available4.8 Medium
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin missing permission checksCVE-2023-32992Fix available8.8 High
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32991Fix available8.8 High
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreJenkins Azure VM Agents Plugin missing permission checksCVE-2023-32990Fix available6.5 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreJenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerabilityCVE-2023-32989Fix available8.8 High
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreJenkins Azure VM Agents Plugin missing permission checksCVE-2023-32988Fix available4.3 Medium
- jenkins reverse proxy auth, jenkins project reverse proxy auth plugin +1 moreJenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerabilityCVE-2023-32987Fix available8.8 High
- jenkins file parameters, jenkins project file parameter plugin +1 moreJenkins File Parameter Plugin arbitrary file write vulnerabilityCVE-2023-32986Fix availableEPSS 60.7%8.8 High
- jenkins sidebar link, jenkins project sidebar link plugin +1 moreJenkins Sidebar Link Plugin vulnerable to Path TraversalCVE-2023-32985Fix availableEPSS 72.4%4.3 Medium
- jenkins testng results, jenkins project testng results plugin +1 moreJenkins TestNG Results Plugin Stored Cross-site Scripting vulnerabilityCVE-2023-32984Fix available5.4 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreJenkins Ansible Plugin job configuration form does not mask variablesCVE-2023-32983Fix available5.3 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreJenkins Ansible Plugin stores and displays secrets in plain textCVE-2023-32982Fix available4.3 Medium
- Show moreLoading…