org.jenkins-ci.plugins

1,035 tracked vulnerabilities.

CVE-2022-45379 HIGH
Jenkins Script Security Plugin < 1190.v65867a_a_47126 - Inadequate Encryption Strength via SHA-1 Hash Collision
Nov 15, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-43432 MEDIUM
Jenkins XFramium Builder Plugin <1.0.22 - XSS
Oct 19, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-43421 MEDIUM
Jenkins Tuleap Git Branch Source Plugin <3.2.4 - Info Disclosure
Oct 19, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-43420 MEDIUM
Jenkins Contrast Plugin < 3.10 - Stored XSS via API Data
Oct 19, 2022
CVSS 5.4
EPSS 0.01
CVE-2022-43419 MEDIUM
Jenkins Katalon Plugin <1.0.32 - Info Disclosure
Oct 19, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-43418 MEDIUM
Jenkins Katalon Plugin <1.0.33 - CSRF
Oct 19, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-43417 MEDIUM
Jenkins Katalon Plugin <1.0.32 - Open Redirect
Oct 19, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-43416 HIGH
Jenkins Katalon Plugin <1.0.32 - RCE
Oct 19, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-43415 HIGH
Jenkins REPO Plugin < 1.16.0 - XML External Entity Injection
Oct 19, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-43414 MEDIUM
Jenkins NUnit Plugin <0.27 - Info Disclosure
Oct 19, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-43413 MEDIUM
Jenkins Job Import Plugin <3.5 - Info Disclosure
Oct 19, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-43412 MEDIUM
Jenkins Generic Webhook Trigger Plugin <1.84.1 - Info Disclosure
Oct 19, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-43411 MEDIUM
Jenkins GitLab Plugin <1.5.35 - Info Disclosure
Oct 19, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-43410 MEDIUM
Jenkins Mercurial Plugin <1251 - Info Disclosure
Oct 19, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-43407 HIGH
Jenkins Pipeline: Input Step Plugin <451.vf1a_a_4f405289 - CSRF Bypass
Oct 19, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-43404 CRITICAL
Jenkins Script Security Plugin <1183.v774b_0b_0a_a_451 - RCE
Oct 19, 2022
CVSS 9.9
EPSS 0.01
CVE-2022-43403 CRITICAL
Jenkins Script Security Plugin <1183.v774b_0b_0a_a_451 - RCE
Oct 19, 2022
CVSS 9.9
EPSS 0.01
CVE-2022-43401 CRITICAL
Jenkins Script Security Plugin <1183.v774b_0b_0a_a_451 - RCE
Oct 19, 2022
CVSS 9.9
EPSS 0.01
CVE-2022-41255 MEDIUM
Jenkins CONS3RT Plugin <1.0.0 - Info Disclosure
Sep 21, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-41254 MEDIUM
Jenkins CONS3RT Plugin <1.0.0 - Privilege Escalation
Sep 21, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-41253 HIGH
Jenkins CONS3RT Plugin <1.0.0 - CSRF
Sep 21, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-41252 MEDIUM
Jenkins CONS3RT Plugin <1.0.0 - Info Disclosure
Sep 21, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-41251 MEDIUM
Jenkins Apprenda Plugin <2.2.0 - Info Disclosure
Sep 21, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-41248 MEDIUM
Jenkins BigPanda Notifier Plugin <1.4.0 - Info Disclosure
Sep 21, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-41247 MEDIUM
Jenkins BigPanda Notifier Plugin <1.4.0 - Info Disclosure
Sep 21, 2022
CVSS 4.3
EPSS 0.00
Products
script-security 35 git 13 email-ext 12 active-directory 11 config-file-provider 9 electricflow 9 credentials-binding 8 ec2 8 oic-auth 8 subversion 8 artifactory 7 htmlpublisher 7 jobConfigHistory 7 mercurial 7 openshift-deployer 7 rundeck 7 azure-ad 6 azure-vm-agents 6 ec2-deployment-dashboard 6 fortify-on-demand-uploader 6 ghprb 6 gitlab-oauth 6 gitlab-plugin 6 pipeline-maven 6 repository-connector 6 aws-codecommit-trigger 5 codedx 5 credentials 5 delphix 5 extended-choice-parameter 5
Quick Filters
Critical CVEs With Exploits In CISA KEV