org.jenkins-ci.plugins

1,024 tracked vulnerabilities.

CVE-2018-1000112 MEDIUM
Jenkins Mercurial Plugin <2.2 - Info Disclosure
Mar 13, 2018
CVSS 5.3
EPSS 0.00
CVE-2018-1000111 MEDIUM
Jenkins Subversion Plugin <2.10.2 - Auth Bypass
Mar 13, 2018
CVSS 5.3
EPSS 0.00
CVE-2018-1000110 MEDIUM
Jenkins Git Plugin <3.7.0 - Auth Bypass
Mar 13, 2018
CVSS 5.3
EPSS 0.11
CVE-2018-1000109 MEDIUM
Jenkins Google Play Android Publisher Plugin <1.6 - Auth Bypass
Mar 13, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-1000108 MEDIUM
Jenkins CppNCSS Plugin < 1.1 - Cross-Site Scripting in AbstractProjectAction/index.jelly
Mar 13, 2018
CVSS 6.1
EPSS 0.00
CVE-2018-1000104 HIGH
Jenkins Coverity Plugin <1.10.0 - Info Disclosure
Mar 13, 2018
CVSS 7.8
EPSS 0.00
CVE-2018-1000057 MEDIUM
Jenkins Credentials Binding Plugin <1.14 - Info Disclosure
Feb 09, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-1000056 HIGH
Jenkins JUnit Plugin <1.23 - SSRF/DoS
Feb 09, 2018
CVSS 8.3
EPSS 0.00
CVE-2018-1000014 HIGH
Jenkins Translation Assistance Plugin < 1.15 - Cross-Site Request Forgery
Jan 23, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-1000013 HIGH
Jenkins Release Plugin < 2.9 - Cross-Site Request Forgery via Form Submission
Jan 23, 2018
CVSS 8.8
EPSS 0.00
CVE-2017-2654 LOW
Jenkins Email Extension < 2.57.1 - Information Exposure via Dynamic Recipient List
Aug 06, 2018
CVSS 3.7
EPSS 0.00
CVE-2017-2652 HIGH
Jenkins Distributed Fork < 1.5.0 - Authenticated Remote Code Execution via dist-fork CLI Command
Jul 27, 2018
CVSS 8.8
EPSS 0.00
CVE-2017-2649 HIGH
Jenkins Active Directory Plugin <= 2.2 - Improper Certificate Validation
Jul 27, 2018
CVSS 8.1
EPSS 0.00
CVE-2017-2648 MEDIUM
Jenkins SSH Slaves Plugin < 1.15 - Man-in-the-Middle via Missing Host Key Verification
Jul 27, 2018
CVSS 6.8
EPSS 0.00
CVE-2017-2651 LOW
Jenkins Mailer < 1.20 - Information Disclosure via Dynamic User List Feature
Jul 27, 2018
CVSS 3.7
EPSS 0.00
CVE-2017-1000402 MEDIUM
Jenkins Swarm Plugin Client <3.4 - Man-in-the-middle
Jan 26, 2018
CVSS 5.9
EPSS 0.00
CVE-2017-1000390 MEDIUM
Jenkins Multijob <1.25 - Privilege Escalation
Jan 26, 2018
CVSS 4.3
EPSS 0.00
CVE-2017-1000389 MEDIUM
Jenkins global-build-stats <1.4 - CSRF/XSS
Jan 26, 2018
CVSS 6.1
EPSS 0.00
CVE-2017-1000388 MEDIUM
Jenkins Dependency Graph Viewer <0.12 - Privilege Escalation
Jan 26, 2018
CVSS 4.3
EPSS 0.00
CVE-2017-1000387 HIGH
Jenkins Build-Publisher <1.21 - Info Disclosure
Jan 26, 2018
CVSS 7.8
EPSS 0.00
CVE-2017-1000505 MEDIUM
Jenkins Script Security Plugin <1.36 - Info Disclosure
Jan 25, 2018
CVSS 6.5
EPSS 0.00
CVE-2017-1000502 HIGH
Jenkins EC2 < 1.37 - Authenticated OS Command Injection via Agent Configuration
Jan 24, 2018
CVSS 8.8
EPSS 0.01
CVE-2017-1000245 CRITICAL
Jenkins SSH Plugin < 2.4 - Insufficiently Protected Credentials
Nov 01, 2017
CVSS 9.8
EPSS 0.00
CVE-2017-1000242 LOW
Jenkins Git Client Plugin <2.4.2 - Info Disclosure
Nov 01, 2017
CVSS 3.3
EPSS 0.00
CVE-2017-1000113 MEDIUM
Deploy to Container Plugin - Info Disclosure
Oct 05, 2017
CVSS 5.5
EPSS 0.00
Products
script-security 35 git 13 email-ext 11 active-directory 9 config-file-provider 9 electricflow 9 ec2 8 oic-auth 8 subversion 8 artifactory 7 credentials-binding 7 htmlpublisher 7 jobConfigHistory 7 mercurial 7 openshift-deployer 7 rundeck 7 azure-ad 6 azure-vm-agents 6 ec2-deployment-dashboard 6 fortify-on-demand-uploader 6 ghprb 6 gitlab-oauth 6 gitlab-plugin 6 pipeline-maven 6 repository-connector 6 aws-codecommit-trigger 5 codedx 5 credentials 5 delphix 5 extended-choice-parameter 5
Quick Filters
Critical CVEs With Exploits In CISA KEV