jenkins

1,755 tracked vulnerabilities.

CVE-2022-41235 MEDIUM
Jenkins WildFly Deployer Plugin <1.0.2 - Info Disclosure
Sep 21, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-41234 HIGH
Jenkins Rundeck Plugin <3.6.11 - CSRF
Sep 21, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-41233 MEDIUM
Jenkins Rundeck Plugin <3.6.11 - Info Disclosure
Sep 21, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-41232 HIGH
Jenkins Build-Publisher Plugin <1.22 - CSRF
Sep 21, 2022
CVSS 8.0
EPSS 0.00
CVE-2022-41231 MEDIUM
Jenkins Build-Publisher Plugin <1.22 - Privilege Escalation
Sep 21, 2022
CVSS 5.7
EPSS 0.00
CVE-2022-41230 MEDIUM
Jenkins Build-Publisher Plugin <1.22 - Info Disclosure
Sep 21, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-41229 MEDIUM
Jenkins NS-ND Integration Performance Publisher Plugin <4.8.0.134 -...
Sep 21, 2022
CVSS 5.4
EPSS 0.09
CVE-2022-41228 HIGH
Jenkins NS-ND Integration Performance Publisher Plugin <4.8.0.129 -...
Sep 21, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-41227 HIGH
Jenkins NS-ND Integration Performance Publisher Plugin <4.8.0.129 -...
Sep 21, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-41226 CRITICAL
Jenkins Compuware Common Configuration Plugin <1.0.14 - XXE
Sep 21, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-41225 MEDIUM
Jenkins Anchore Container Image Scanner Plugin <1.0.24 - XSS
Sep 21, 2022
CVSS 5.4
EPSS 0.21
CVE-2022-41224 MEDIUM
Jenkins 2.367-2.369 - Stored Cross-Site Scripting via l:helpIcon Tooltip
Sep 21, 2022
CVSS 5.4
EPSS 0.03
CVE-2022-38665 MEDIUM
Jenkins CollabNet Plugins <2.0.8 - Info Disclosure
Aug 23, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-38664 MEDIUM
Jenkins Job Configuration History Plugin <1165.v8cc9fd1f4597 - XSS
Aug 23, 2022
CVSS 5.4
EPSS 0.16
CVE-2022-38663 MEDIUM
Jenkins Git Plugin <4.11.4 - Info Disclosure
Aug 23, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-36922 MEDIUM
Jenkins Lucene-Search Plugin < 370.v62a5f618cd3a - Reflected Cross-Site Scripting via Search Query Parameter
Jul 27, 2022
CVSS 6.1
EPSS 0.11
CVE-2022-36921 HIGH
Jenkins Coverity Plugin < 1.11.4 - Missing Authorization for Credential Capture via URL Connection
Jul 27, 2022
CVSS 8.1
EPSS 0.01
CVE-2022-36920 HIGH
Jenkins Coverity Plugin < 1.11.4 - Cross-Site Request Forgery
Jul 27, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-36919 MEDIUM
Jenkins Coverity Plugin < 1.11.4 - Credential ID Enumeration via Missing Permission Check
Jul 27, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-36918 MEDIUM
Jenkins Buckminster Plugin < 1.1.1 - File Existence Disclosure via Form Validation
Jul 27, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-36917 MEDIUM
Jenkins Google Cloud Backup Plugin < 0.6 - Missing Authorization for Manual Backup Request
Jul 27, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-36916 HIGH
Jenkins Google Cloud Backup Plugin < 0.6 - Cross-Site Request Forgery
Jul 27, 2022
CVSS 8.0
EPSS 0.00
CVE-2022-36915 MEDIUM
Jenkins Android Signing Plugin < 2.2.5 - Missing Authorization in Form Validation
Jul 27, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-36914 MEDIUM
Jenkins Files Found Trigger Plugin <= 1.5 - Missing Authorization for File Existence Check
Jul 27, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-36913 MEDIUM
Jenkins Openstack Heat Plugin < 1.5 - Unauthenticated Path Disclosure via Form Validation
Jul 27, 2022
CVSS 4.3
EPSS 0.00
Products
jenkins 259 pipeline\ 37 script_security 33 blue_ocean 11 git 11 email_extension 10 active_directory 9 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 ns-nd_integration_performance_publisher 8 credentials_binding 7 github_branch_source 7 html_publisher 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 github 6 github_pull_request_builder 6 gitlab 6 google_compute_engine 6 hashicorp_vault 6
Quick Filters
Critical CVEs With Exploits In CISA KEV