org.jenkins-ci.plugins

1,024 tracked vulnerabilities.

CVE-2018-1000417 HIGH
Jenkins Email Extension Template Plugin <1.0 - CSRF
Jan 09, 2019
CVSS 8.1
EPSS 0.00
CVE-2018-1000416 MEDIUM
Jenkins Job Config History Plugin <2.18 - XSS
Jan 09, 2019
CVSS 6.1
EPSS 0.00
CVE-2018-1000414 HIGH
Jenkins Config File Provider Plugin <3.1 - CSRF
Jan 09, 2019
CVSS 8.1
EPSS 0.00
CVE-2018-1000413 MEDIUM
Jenkins Config File Provider Plugin <3.1 - XSS
Jan 09, 2019
CVSS 5.4
EPSS 0.00
CVE-2018-1000412 HIGH
Jenkins Jira Plugin <3.0.1 - Auth Bypass
Jan 09, 2019
CVSS 8.8
EPSS 0.00
CVE-2018-1000411 MEDIUM
Jenkins JUnit Plugin < 1.25 - Cross-Site Request Forgery in TestObject.java
Jan 09, 2019
CVSS 6.5
EPSS 0.00
CVE-2018-1000866 HIGH
Pipeline: Groovy Plugin <2.59 - Code Injection
Dec 10, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1000865 HIGH
Jenkins Script Security Plugin < 1.47 - Sandbox Bypass via SandboxTransformer
Dec 10, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1999039 MEDIUM
Jenkins Confluence Publisher Plugin <2.0.1 - SSRF
Aug 01, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-1999038 MEDIUM
Jenkins Publisher Over CIFS Plugin <0.10 - Confused Deputy
Aug 01, 2018
CVSS 4.2
EPSS 0.00
CVE-2018-1999037 MEDIUM
Jenkins Resource Disposer Plugin <0.11 - Info Disclosure
Aug 01, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-1999036 MEDIUM
Jenkins SSH Agent Plugin <1.15 - Info Disclosure
Aug 01, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1999033 MEDIUM
Jenkins Anchore Container Image Scanner Plugin <= 10.16 - Exposure of Sensitive Information via AnchoreBuilder.java
Aug 01, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1999032 MEDIUM
Agiletestware Pangolin Connector For Testrail < 2.1 - Improper Privilege Management
Aug 01, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1999031 MEDIUM
Jenkins meliora-testlab Plugin <1.14 - Info Disclosure
Aug 01, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1999030 MEDIUM
Jenkins Maven Artifact ChoiceListProvider <1.3.1 - Info Disclosure
Aug 01, 2018
CVSS 5.4
EPSS 0.00
CVE-2018-1999029 MEDIUM
Jenkins Shelve Project Plugin <1.5 - XSS
Aug 01, 2018
CVSS 5.4
EPSS 0.00
CVE-2018-1999028 HIGH
Jenkins Accurev Plugin <0.7.16 - Info Disclosure
Aug 01, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-1999027 HIGH
Jenkins SaltStack Plugin <3.1.6 - Info Disclosure
Aug 01, 2018
CVSS 7.5
EPSS 0.00
CVE-2018-1000608 HIGH
Jenkins z/OS Connector Plugin <1.2.6.1 - Info Disclosure
Jun 26, 2018
CVSS 7.2
EPSS 0.00
CVE-2018-1000607 MEDIUM
Jenkins Fortify CloudScan Plugin <1.5.1 - Arbitrary File Write
Jun 26, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1000606 MEDIUM
Jenkins URLTrigger Plugin <0.41 - SSRF
Jun 26, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-1000605 HIGH
Jenkins CollabNet Plugin <2.0.4 - SSRF
Jun 26, 2018
CVSS 7.4
EPSS 0.00
CVE-2018-1000604 MEDIUM
Jenkins Badge Plugin < 1.4 - Stored Cross-Site Scripting in BadgeSummaryAction.java and HtmlBadgeAction.java
Jun 26, 2018
CVSS 5.4
EPSS 0.00
CVE-2018-1000603 HIGH
Jenkins Openstack Cloud Plugin <2.35 - Info Disclosure
Jun 26, 2018
CVSS 8.8
EPSS 0.00
Products
script-security 35 git 13 email-ext 11 active-directory 9 config-file-provider 9 electricflow 9 ec2 8 oic-auth 8 subversion 8 artifactory 7 credentials-binding 7 htmlpublisher 7 jobConfigHistory 7 mercurial 7 openshift-deployer 7 rundeck 7 azure-ad 6 azure-vm-agents 6 ec2-deployment-dashboard 6 fortify-on-demand-uploader 6 ghprb 6 gitlab-oauth 6 gitlab-plugin 6 pipeline-maven 6 repository-connector 6 aws-codecommit-trigger 5 codedx 5 credentials 5 delphix 5 extended-choice-parameter 5
Quick Filters
Critical CVEs With Exploits In CISA KEV