jenkins

1,755 tracked vulnerabilities.

CVE-2023-28674 HIGH
Jenkins OctoPerf Load Testing Plugin <4.5.2 - CSRF
Apr 02, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-28673 MEDIUM
Jenkins OctoPerf Load Testing Plugin <4.5.2 - Info Disclosure
Apr 02, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-28672 MEDIUM
Jenkins OctoPerf Load Testing Plugin <4.5.1 - Auth Bypass
Apr 02, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-28671 MEDIUM
Jenkins OctoPerf Load Testing Plugin <4.5.0 - CSRF
Apr 02, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-28670 MEDIUM
Jenkins Pipeline Aggregator View Plugin <1.13 - XSS
Apr 02, 2023
CVSS 5.4
EPSS 0.10
CVE-2023-28669 MEDIUM
Jenkins JaCoCo Plugin < 3.3.2 - Stored Cross-Site Scripting via Unescaped Class and Method Names
Apr 02, 2023
CVSS 5.4
EPSS 0.09
CVE-2023-28668 CRITICAL
Jenkins Role-based Authorization Strategy Plugin <587.v2872c41fa_e5...
Apr 02, 2023
CVSS 9.8
EPSS 0.01
CVE-2023-28685 HIGH
Jenkins AbsInt a³ Plugin <1.1.0 - XXE
Mar 22, 2023
CVSS 7.1
EPSS 0.01
CVE-2023-27905 CRITICAL
Jenkins update-center2 3.13-3.14 - Stored Cross-Site Scripting in Plugin Download Index Page
Mar 10, 2023
CVSS 9.6
EPSS 0.04
CVE-2023-27904 MEDIUM
Jenkins < 2.375.4, 2.376-2.387.1, < 2.394 - Information Exposure via Agent Connection Error Stack Trace
Mar 10, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-27903 MEDIUM
Jenkins < 2.375.4, 2.376-2.387.1, < 2.394 - Unauthenticated Sensitive File Exposure via CLI File Parameter Upload
Mar 10, 2023
CVSS 4.4
EPSS 0.00
CVE-2023-27902 MEDIUM
Jenkins < 2.375.4, 2.376-2.387.1, < 2.394 - Unprotected Temporary Directory Exposure via Job Workspace
Mar 10, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-27901 HIGH
Jenkins < 2.375.4, < 2.394 - Denial of Service via Unlimited Request Parts
Mar 10, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-27900 HIGH
Jenkins < 2.375.4, < 2.394 - Denial of Service via Unlimited Request Parts in MultipartFormDataParser
Mar 10, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-27899 HIGH
Jenkins < 2.375.4, < 2.394, 2.376-2.387.1 - Arbitrary Code Execution via Plugin Upload Temporary File
Mar 10, 2023
CVSS 7.0
EPSS 0.00
CVE-2023-27898 CRITICAL
Jenkins 2.270-2.393 and LTS 2.277.1-2.375.3 - Stored Cross-Site Scripting in Plugin Dependency Version Error Message
Mar 10, 2023
CVSS 9.6
EPSS 0.02
CVE-2023-23850 MEDIUM
Synopsys Jenkins Coverity Plugin <3.0.2 - Info Disclosure
Feb 15, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-23848 MEDIUM
Synopsys Jenkins Coverity Plugin <3.0.2 - Privilege Escalation
Feb 15, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-23847 LOW
Synopsys Jenkins Coverity Plugin <3.0.2 - CSRF
Feb 15, 2023
CVSS 3.5
EPSS 0.00
CVE-2023-25768 MEDIUM
Jenkins Azure Credentials Plugin < 254.v64da_8176c83a - Missing Authorization
Feb 15, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-25767 HIGH
Jenkins Azure Credentials Plugin < 254.v64da_8176c83a - Cross-Site Request Forgery
Feb 15, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-25766 MEDIUM
Jenkins Azure Credentials Plugin < 254.v64da_8176c83a - Missing Authorization for Credential ID Enumeration
Feb 15, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-25765 CRITICAL
Jenkins Email Extension Plugin <2.93 - Code Injection
Feb 15, 2023
CVSS 9.9
EPSS 0.01
CVE-2023-25764 MEDIUM
Jenkins Email Extension Plugin < 2.93.1 - Stored Cross-Site Scripting via Email Template Rendering
Feb 15, 2023
CVSS 5.4
EPSS 0.21
CVE-2023-25763 MEDIUM
Jenkins Email Extension Plugin < 2.93.1 - Stored Cross-Site Scripting in Email Template Fields
Feb 15, 2023
CVSS 5.4
EPSS 0.21
Products
jenkins 259 pipeline\ 37 script_security 33 blue_ocean 11 git 11 email_extension 10 active_directory 9 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 ns-nd_integration_performance_publisher 8 credentials_binding 7 github_branch_source 7 html_publisher 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 github 6 github_pull_request_builder 6 gitlab 6 google_compute_engine 6 hashicorp_vault 6
Quick Filters
Critical CVEs With Exploits In CISA KEV