jenkins

1,755 tracked vulnerabilities.

CVE-2023-25762 MEDIUM
Jenkins Pipeline: Build Step Plugin < 2.18 - Stored Cross-Site Scripting via Job Name in Pipeline Snippet Generator
Feb 15, 2023
CVSS 5.4
EPSS 0.65
CVE-2023-25761 MEDIUM
Jenkins JUnit Plugin < 1166.va_436e268e972 - Stored Cross-Site Scripting via Test Case Class Names
Feb 15, 2023
CVSS 5.4
EPSS 0.02
CVE-2023-24459 MEDIUM
Jenkins BearyChat Plugin <3.0.2 - CSRF
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24458 HIGH
Jenkins BearyChat Plugin <3.0.2 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-24457 MEDIUM
Jenkins Keycloak Auth Plugin <2.3.0 - CSRF
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24456 CRITICAL
Jenkins Keycloak Authentication Plugin <2.3.0 - Info Disclosure
Jan 26, 2023
CVSS 9.8
EPSS 0.00
CVE-2023-24455 MEDIUM
Jenkins visualexpert Plugin <1.3 - Info Disclosure
Jan 26, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-24454 MEDIUM
Jenkins TestQuality Updater Plugin <1.3 - Info Disclosure
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24453 MEDIUM
Jenkins TestQuality Updater Plugin <1.3 - Open Redirect
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24452 HIGH
Jenkins TestQuality Updater Plugin <1.3 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-24451 MEDIUM
Jenkins Cisco Spark Notifier Plugin <1.1.1 - Info Disclosure
Jan 26, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-24450 MEDIUM
Jenkins view-cloner Plugin <1.1 - Info Disclosure
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24449 MEDIUM
Jenkins PWauth Security Realm Plugin <0.4 - Info Disclosure
Jan 26, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-24448 MEDIUM
Jenkins RabbitMQ Consumer Plugin <2.8 - Privilege Escalation
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24447 HIGH
Jenkins RabbitMQ Consumer Plugin <2.8 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-24446 HIGH
Jenkins OpenID Plugin < 2.4 - Cross-Site Request Forgery
Jan 26, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-24445 MEDIUM
Jenkins OpenID Plugin <2.4 - Open Redirect
Jan 26, 2023
CVSS 6.1
EPSS 0.01
CVE-2023-24444 CRITICAL
Jenkins OpenID Plugin <2.4 - Info Disclosure
Jan 26, 2023
CVSS 9.8
EPSS 0.02
CVE-2023-24443 CRITICAL
Jenkins TestComplete support Plugin <2.8.1 - XXE
Jan 26, 2023
CVSS 9.8
EPSS 0.02
CVE-2023-24442 MEDIUM
Jenkins GitHub Pull Request Coverage Status Plugin <2.2.0 - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24441 CRITICAL
Jenkins MSTest Plugin < 1.0.0 - XML External Entity Injection
Jan 26, 2023
CVSS 9.8
EPSS 0.02
CVE-2023-24440 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24439 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24438 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - SSRF
Jan 26, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-24437 HIGH
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.00
Products
jenkins 259 pipeline\ 37 script_security 33 blue_ocean 11 git 11 email_extension 10 active_directory 9 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 ns-nd_integration_performance_publisher 8 credentials_binding 7 github_branch_source 7 html_publisher 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 github 6 github_pull_request_builder 6 gitlab 6 google_compute_engine 6 hashicorp_vault 6
Quick Filters
Critical CVEs With Exploits In CISA KEV