jenkins
1,755 tracked vulnerabilities.
CVE-2021-21612
MEDIUM
Jenkins TraceTronic ECU-TEST Plugin < 2.23.1 - Insufficiently Protected Credentials
Jan 13, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-21611
MEDIUM
Jenkins < 2.263.1, < 2.274 - Stored Cross-Site Scripting in New Item Page
Jan 13, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-21610
MEDIUM
Jenkins < 2.263.1, < 2.274 - Reflected Cross-Site Scripting via Markup Preview URL Parameter
Jan 13, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-21609
MEDIUM
Jenkins < 2.263.1, < 2.274 - Incorrect Authorization via URL Path Matching
Jan 13, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-21608
MEDIUM
Jenkins < 2.263.1, < 2.274, and 2.275 - Cross-Site Scripting via Button Label
Jan 13, 2021
CVSS 5.4
EPSS 0.01
CVE-2021-21607
MEDIUM
Jenkins < 2.263.1, < 2.274 - Denial of Service via Unbounded Graph Query Parameters
Jan 13, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-21606
MEDIUM
Jenkins < 2.263.1, < 2.274 - Unauthenticated XML File Existence Check via Fingerprint ID Validation
Jan 13, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-21605
HIGH
Jenkins < 2.263.1, < 2.274 - Path Traversal via Agent Name Configuration
Jan 13, 2021
CVSS 8.0
EPSS 0.00
CVE-2021-21604
HIGH
Jenkins < 2.263.1, < 2.274 - Deserialization of Untrusted Data via Old Data Monitor
Jan 13, 2021
CVSS 8.0
EPSS 0.01
CVE-2021-21603
MEDIUM
Jenkins < 2.263.1, < 2.274 - Cross-Site Scripting in Notification Bar
Jan 13, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-21602
MEDIUM
Jenkins < 2.263.1, < 2.274 - Arbitrary File Read via Symlink Following
Jan 13, 2021
CVSS 6.5
EPSS 0.01
CVE-2020-2324
HIGH
Jenkins CVS Plugin < 2.16 - XML External Entity Injection
Dec 03, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-2321
HIGH
Jenkins Shelve Project Plugin <3.0 - CSRF
Dec 03, 2020
CVSS 8.1
EPSS 0.00
CVE-2020-2320
CRITICAL
Jenkins Plugin Installation Manager Tool <2.1.3 - Info Disclosure
Dec 03, 2020
CVSS 9.8
EPSS 0.00
CVE-2020-2319
MEDIUM
Jenkins VMware Lab Manager Slaves Plugin <0.2.8 - Info Disclosure
Nov 04, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-2318
MEDIUM
Jenkins Mail Commander Plugin <1.0.0 - Info Disclosure
Nov 04, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-2317
MEDIUM
Jenkins FindBugs Plugin <5.0.0 - XSS
Nov 04, 2020
CVSS 5.4
EPSS 0.00
CVE-2020-2316
MEDIUM
Jenkins Static Analysis Utilities Plugin <1.96 - XSS
Nov 04, 2020
CVSS 5.4
EPSS 0.00
CVE-2020-2315
MEDIUM
Jenkins Visualworks Store Plugin <1.1.3 - XXE
Nov 04, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-2314
MEDIUM
Jenkins AppSpider Plugin <1.0.12 - Info Disclosure
Nov 04, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-2313
MEDIUM
Jenkins Azure Key Vault Plugin <2.0 - Info Disclosure
Nov 04, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-2312
MEDIUM
Jenkins SQLPlus Script Runner Plugin <2.0.12 - Info Disclosure
Nov 04, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-2311
MEDIUM
Jenkins AWS Global Configuration Plugin <1.5 - Privilege Escalation
Nov 04, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-2310
MEDIUM
Jenkins Ansible Plugin <1.0 - Info Disclosure
Nov 04, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-2309
MEDIUM
Jenkins Kubernetes Plugin <1.27.3 - Info Disclosure
Nov 04, 2020
CVSS 4.3
EPSS 0.00
Products
jenkins 259
pipeline\ 37
script_security 33
blue_ocean 11
git 11
email_extension 10
active_directory 9
build_failure_analyzer 9
config_file_provider 9
configuration_as_code 9
ns-nd_integration_performance_publisher 8
credentials_binding 7
github_branch_source 7
html_publisher 7
kubernetes 7
openid_connect_authentication 7
openshift_deployer 7
rundeck 7
subversion 7
amazon_ec2 6
azure_ad 6
azure_vm_agents 6
deployment_dashboard 6
electricflow 6
gerrit_trigger 6
github 6
github_pull_request_builder 6
gitlab 6
google_compute_engine 6
hashicorp_vault 6
Quick Filters