org.jenkins-ci.plugins
1,024 tracked vulnerabilities.
CVE-2022-28159
MEDIUM
Jenkins Tests Selector Plugin < 1.3.3 - Stored Cross-Site Scripting via Properties File Path Option
Mar 29, 2022
CVSS 5.4
EPSS 0.00
CVE-2022-28154
HIGH
Jenkins Coverage/Complexity Scatter Plot Plugin < 1.1.1 - XML External Entity Injection
Mar 29, 2022
CVSS 8.1
EPSS 0.00
CVE-2022-28148
MEDIUM
Jenkins Continuous Integration with Toad Edge Plugin < 2.3 - Path Traversal via File Browser
Mar 29, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-28147
MEDIUM
Jenkins Continuous Integration with Toad Edge Plugin < 2.3 - Missing Authorization for File Path Existence Check
Mar 29, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-28146
MEDIUM
Jenkins Continuous Integration with Toad Edge Plugin < 2.3 - Arbitrary File Read via Input Folder Parameter
Mar 29, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-28145
MEDIUM
Jenkins Continuous Integration with Toad Edge Plugin < 2.3 - Stored Cross-Site Scripting via Report Files
Mar 29, 2022
CVSS 5.4
EPSS 0.00
CVE-2022-28144
MEDIUM
Jenkins Proxmox Plugin < 0.7.0 - Missing Authorization in HTTP Endpoints
Mar 29, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-28143
MEDIUM
Jenkins Proxmox Plugin < 0.7.0 - Cross-Site Request Forgery
Mar 29, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-28142
HIGH
Jenkins Proxmox Plugin < 0.6.0 - SSL/TLS Certificate Validation Disabled
Mar 29, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-28141
MEDIUM
Jenkins Proxmox Plugin < 0.5.0 - Insufficiently Protected Credentials
Mar 29, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-28140
HIGH
Jenkins Flaky Test Handler Plugin < 1.2.1 - XML External Entity Injection
Mar 29, 2022
CVSS 8.1
EPSS 0.00
CVE-2022-28139
MEDIUM
Jenkins RocketChat Notifier Plugin < 1.4.0 - Missing Authorization
Mar 29, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-28138
MEDIUM
Jenkins RocketChat Notifier Plugin < 1.4.10 - Cross-Site Request Forgery
Mar 29, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-28137
MEDIUM
Jenkins JiraTestResultReporter < 165.v817928553942 - Missing Authorization for URL Connection
Mar 29, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-28136
HIGH
Jenkins JiraTestResultReporter < 165.v817928553942 - Cross-Site Request Forgery
Mar 29, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-27216
MEDIUM
Jenkins dbCharts Plugin <= 0.5.2 - Insufficiently Protected Credentials
Mar 15, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-27215
MEDIUM
Jenkins Release Helper Plugin < 1.3.3 - Server-Side Request Forgery via Missing Permission Check
Mar 15, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-27214
MEDIUM
Jenkins Release Helper Plugin < 1.3.3 - Cross-Site Request Forgery
Mar 15, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-27212
MEDIUM
Jenkins List Git Branches Parameter Plugin <= 0.0.9 - Stored Cross-Site Scripting in Parameter Name
Mar 15, 2022
CVSS 5.4
EPSS 0.00
CVE-2022-27211
MEDIUM
Jenkins Kubernetes Continuous Deploy Plugin < 2.3.1 - Missing Authorization for SSH Credential Capture
Mar 15, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-27210
MEDIUM
Jenkins Kubernetes Continuous Deploy Plugin < 2.3.1 - Cross-Site Request Forgery
Mar 15, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-27209
MEDIUM
Jenkins Kubernetes Continuous Deploy Plugin < 2.3.1 - Missing Authorization for Credential ID Enumeration
Mar 15, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-27208
MEDIUM
Jenkins Kubernetes Continuous Deploy Plugin <= 2.3.1 - Arbitrary File Read via Credentials/Create Permission
Mar 15, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-27207
MEDIUM
Jenkins global-build-stats < 1.5 - Stored Cross-Site Scripting in Chart Configuration
Mar 15, 2022
CVSS 4.8
EPSS 0.00
CVE-2022-27206
MEDIUM
Jenkins GitLab Authentication Plugin <= 1.13 - Insufficiently Protected Credentials
Mar 15, 2022
CVSS 6.5
EPSS 0.00
Products
script-security 35
git 13
email-ext 11
active-directory 9
config-file-provider 9
electricflow 9
ec2 8
oic-auth 8
subversion 8
artifactory 7
credentials-binding 7
htmlpublisher 7
jobConfigHistory 7
mercurial 7
openshift-deployer 7
rundeck 7
azure-ad 6
azure-vm-agents 6
ec2-deployment-dashboard 6
fortify-on-demand-uploader 6
ghprb 6
gitlab-oauth 6
gitlab-plugin 6
pipeline-maven 6
repository-connector 6
aws-codecommit-trigger 5
codedx 5
credentials 5
delphix 5
extended-choice-parameter 5
Quick Filters