Security advisories

high2022-05-24

CVE-2021-22510-Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin

View chart →

jenkinsci/hpe-application-automation-tools-plugin · GHSA-gc2r-ccfh-62v9

medium2022-05-24

CVE-2021-22513-Missing permission checks in Micro Focus Application Automation Tools Plugin

View chart →

jenkinsci/hpe-application-automation-tools-plugin · GHSA-7qp2-rgxr-29q4

medium2022-05-24

CVE-2020-23761-subrion CMS Cross Site Scripting (XSS) vulnerability

View chart →

intelliants/subrion · GHSA-xhc3-5pgf-p576

medium2022-05-24

CVE-2021-21640-View name validation bypass in Jenkins

View chart →

jenkinsci/jenkins · GHSA-w2hv-rcqr-2h7r

medium2022-05-24

CVE-2021-21639-Lack of type validation in agent related REST API in Jenkins

View chart →

jenkinsci/jenkins · GHSA-pvwx-3jx5-24r2

medium2022-05-24

CVE-2021-21641-CSRF vulnerability in Jenkins promoted builds Plugin

View chart →

jenkinsci/promoted-builds-plugin · GHSA-5cxw-8v65-76vf

medium2022-05-24

CVE-2021-30074-Docsify vulnerable to cross-site scripting due to mishandled encoding

View chart →

docsifyjs/docsify · GHSA-5h7x-68wj-jhwc

medium2022-05-24

CVE-2021-21634-Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin

View chart →

jenkinsci/jabber-plugin · GHSA-79r5-rhrw-7pvh

medium2022-05-24

CVE-2021-21632-Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

View chart →

jenkinsci/dependency-track-plugin · GHSA-xfrw-pcmc-r2p3

medium2022-05-24

CVE-2021-21636-Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs

View chart →

jenkinsci/tfs-plugin · GHSA-vg28-9f43-gmh5

medium2022-05-24

CVE-2021-21637-Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials

View chart →

jenkinsci/tfs-plugin · GHSA-6364-jx4h-7564

high2022-05-24

CVE-2021-21638-CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

View chart →

jenkinsci/tfs-plugin · GHSA-263q-5pj7-j6hj

medium2022-05-24

CVE-2021-21631-Missing permission check in Jenkins Cloud Statistics Plugin

View chart →

jenkinsci/cloud-stats-plugin · GHSA-xv69-6rf3-w5g2

medium2022-05-24

CVE-2021-21635-Stored XSS vulnerability in Jenkins REST List Parameter Plugin

View chart →

jenkinsci/rest-list-parameter-plugin · GHSA-x3m6-vcp7-98mr

high2022-05-24

CVE-2021-21633-CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

View chart →

jenkinsci/dependency-track-plugin · GHSA-v7xh-h48c-xw5f

medium2022-05-24

CVE-2021-21628-Stored XSS vulnerability in Jenkins Build With Parameters Plugin

View chart →

jenkinsci/build-with-parameters-plugin · GHSA-xjrg-6fv9-6rjg

medium2022-05-24

CVE-2021-21630-Stored XSS vulnerability in Jenkins Extra Columns Plugin

View chart →

jenkinsci/extra-columns-plugin · GHSA-wx66-pm7r-2q82

high2022-05-24

CVE-2021-21629-CSRF vulnerability in Jenkins Build With Parameters Plugin

View chart →

jenkinsci/build-with-parameters-plugin · GHSA-w24g-24qg-v4w2

medium2022-05-24

CVE-2021-21624-Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items

View chart →

jenkinsci/role-strategy-plugin · GHSA-rm4m-39fj-288c

high2022-05-24

CVE-2021-21627-CSRF vulnerability in Jenkins Libvirt Agents Plugin

View chart →

jenkinsci/libvirt-slave-plugin · GHSA-mm5c-7mpr-99fm