jenkins vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20194
3. 20235
4. 20251

Newest CVEs

• CVE-2024-9453

  Jenkins-image: sensitive data disclosure when using openshift jenkins image

  Jenkins · openshift-sync-plugin

  Medium6.5
• CVE-2023-2631

  CSRF vulnerability and missing permission checks in Code Dx Plugin

  Jenkins · Jenkins Code Dx Plugin

  Medium4.3
• CVE-2023-2195

  CSRF vulnerability and missing permission checks in Code Dx Plugin

  Jenkins · Jenkins Code Dx Plugin

  Medium4.3
• CVE-2023-2633

  API keys stored and displayed in plain text by Code Dx Plugin

  Jenkins · Jenkins Code Dx Plugin

  Medium4.3
• CVE-2023-2632

  API keys stored and displayed in plain text by Code Dx Plugin

  Jenkins · Jenkins Code Dx Plugin

  Medium4.3
• CVE-2023-2196

  Missing permission checks in Code Dx Plugin

  Jenkins · Jenkins Code Dx Plugin

  Medium4.3
• CVE-2012-4441

  Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game…

  jenkins · jenkins

  Medium6.1
• CVE-2012-4440

  Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations…

  jenkins · jenkins

  Medium6.1
• CVE-2012-4439

  Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL…

  jenkins · jenkins

  Medium6.1
• CVE-2012-4438

  Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute…

  jenkins · jenkins

  High8.8