org.jenkins-ci.plugins

1,035 tracked vulnerabilities.

CVE-2023-25767 HIGH
Jenkins Azure Credentials Plugin < 254.v64da_8176c83a - Cross-Site Request Forgery
Feb 15, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-25766 MEDIUM
Jenkins Azure Credentials Plugin < 254.v64da_8176c83a - Missing Authorization for Credential ID Enumeration
Feb 15, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-25765 CRITICAL
Jenkins Email Extension Plugin <2.93 - Code Injection
Feb 15, 2023
CVSS 9.9
EPSS 0.01
CVE-2023-25764 MEDIUM
Jenkins Email Extension Plugin < 2.93.1 - Stored Cross-Site Scripting via Email Template Rendering
Feb 15, 2023
CVSS 5.4
EPSS 0.01
CVE-2023-25763 MEDIUM
Jenkins Email Extension Plugin < 2.93.1 - Stored Cross-Site Scripting in Email Template Fields
Feb 15, 2023
CVSS 5.4
EPSS 0.01
CVE-2023-25762 MEDIUM
Jenkins Pipeline: Build Step Plugin < 2.18 - Stored Cross-Site Scripting via Job Name in Pipeline Snippet Generator
Feb 15, 2023
CVSS 5.4
EPSS 0.81
CVE-2023-25761 MEDIUM
Jenkins JUnit Plugin < 1166.va_436e268e972 - Stored Cross-Site Scripting via Test Case Class Names
Feb 15, 2023
CVSS 5.4
EPSS 0.01
CVE-2023-24459 MEDIUM
Jenkins BearyChat Plugin <3.0.2 - CSRF
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-24458 HIGH
Jenkins BearyChat Plugin <3.0.2 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-24457 MEDIUM
Jenkins Keycloak Auth Plugin <2.3.0 - CSRF
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-24456 CRITICAL
Jenkins Keycloak Authentication Plugin <2.3.0 - Info Disclosure
Jan 26, 2023
CVSS 9.8
EPSS 0.01
CVE-2023-24454 MEDIUM
Jenkins TestQuality Updater Plugin <1.3 - Info Disclosure
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24453 MEDIUM
Jenkins TestQuality Updater Plugin <1.3 - Open Redirect
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-24452 HIGH
Jenkins TestQuality Updater Plugin <1.3 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-24451 MEDIUM
Jenkins Cisco Spark Notifier Plugin <1.1.1 - Info Disclosure
Jan 26, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-24450 MEDIUM
Jenkins view-cloner Plugin <1.1 - Info Disclosure
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-24448 MEDIUM
Jenkins RabbitMQ Consumer Plugin <2.8 - Privilege Escalation
Jan 26, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-24447 HIGH
Jenkins RabbitMQ Consumer Plugin <2.8 - CSRF
Jan 26, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-24446 HIGH
Jenkins OpenID Plugin < 2.4 - Cross-Site Request Forgery
Jan 26, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-24445 MEDIUM
Jenkins OpenID Plugin <2.4 - Open Redirect
Jan 26, 2023
CVSS 6.1
EPSS 0.01
CVE-2023-24444 CRITICAL
Jenkins OpenID Plugin <2.4 - Info Disclosure
Jan 26, 2023
CVSS 9.8
EPSS 0.01
CVE-2023-24443 CRITICAL
Jenkins TestComplete support Plugin <2.8.1 - XXE
Jan 26, 2023
CVSS 9.8
EPSS 0.01
CVE-2023-24442 MEDIUM
Jenkins GitHub Pull Request Coverage Status Plugin <2.2.0 - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24440 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-24439 MEDIUM
Jenkins JIRA Pipeline Steps Plugin <2.0.165.v8846cf59f3db - Info Di...
Jan 26, 2023
CVSS 5.5
EPSS 0.00
Products
script-security 35 git 13 email-ext 12 active-directory 11 config-file-provider 9 electricflow 9 credentials-binding 8 ec2 8 oic-auth 8 subversion 8 artifactory 7 htmlpublisher 7 jobConfigHistory 7 mercurial 7 openshift-deployer 7 rundeck 7 azure-ad 6 azure-vm-agents 6 ec2-deployment-dashboard 6 fortify-on-demand-uploader 6 ghprb 6 gitlab-oauth 6 gitlab-plugin 6 pipeline-maven 6 repository-connector 6 aws-codecommit-trigger 5 codedx 5 credentials 5 delphix 5 extended-choice-parameter 5
Quick Filters
Critical CVEs With Exploits In CISA KEV