Products
DevOps, CI/CD & developer tools
Jenkins
- Last 30 days
- 0
- Actively exploited (KEV)
- 0
- All CVEs
- 6
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-34148 | 6.8Medium |
Jenkins jenkinsJenkins Project Jenkins Subversion Partial Release Manager Plugin
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model…
|
0.78% |
2024-05-02
30 mo ago
|
| CVE-2023-43497 | Not scored |
Jenkins jenkins
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly cre…
|
0.96% |
2023-09-20
38 mo ago
|
| CVE-2012-4441 | Not scored |
Jenkins jenkins
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.
|
1.86% |
2019-11-19
84 mo ago
|
| CVE-2012-4440 | Not scored |
Jenkins jenkins
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.
|
1.86% |
2019-11-19
84 mo ago
|
| CVE-2012-4439 | Not scored |
Jenkins jenkins
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.
|
1.84% |
2019-11-19
84 mo ago
|
| CVE-2012-4438 | Not scored |
Jenkins jenkins
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.
|
2.38% |
2019-11-19
84 mo ago
|