Security advisories

low2022-02-16

CVE-2022-25186-Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin

View chart →

jenkinsci/hashicorp-vault-plugin · GHSA-fm6q-97gw-c4wh

medium2022-02-16

CVE-2022-25187-Jenkins Support Core Plugin stores sensitive data in plain text

View chart →

jenkinsci/support-core-plugin · GHSA-5m8f-v3gw-h94w

high2022-02-16

CVE-2022-25189-Stored Cross-site Scripting vulnerability in Jenkins Custom Checkbox Parameter Plugin

View chart →

jenkinsci/custom-checkbox-parameter-plugin · GHSA-6q8r-5pm6-v2q8

medium2022-02-16

CVE-2022-25188-Path traversal vulnerability in Jenkins Fortify Plugin

View chart →

jenkinsci/fortify-plugin · GHSA-23h5-8ph6-7rfc

high2022-02-16

CVE-2022-25191-Stored Cross-site Scripting vulnerability in Jenkins Agent Server Parameter Plugin

View chart →

jenkinsci/agent-server-parameter-plugin · GHSA-53c4-cmhf-gp7w

medium2022-02-16

CVE-2022-25190-Missing permission check in Jenkins Conjur Secrets Plugin allows enumerating credentials IDs

View chart →

jenkinsci/conjur-credentials-plugin · GHSA-372f-jc47-7gr5

medium2022-02-16

CVE-2022-25192-Jenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request Forgery

View chart →

jenkinsci/snowsoftware-commander-plugin · GHSA-fhfh-6cjg-57rg

medium2022-02-16

CVE-2022-25193-Jenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing Authorization

View chart →

jenkinsci/snowsoftware-commander-plugin · GHSA-2phq-ghf8-6586

high2022-02-16

CVE-2022-25194-CSRF vulnerability in Jenkins autonomiq plugin

View chart →

jenkinsci/autonomiq-plugin · GHSA-g5wh-fw4m-2v28

medium2022-02-16

CVE-2022-25195-Missing permission check in Jenkins autonomiq Plugin

View chart →

jenkinsci/autonomiq-plugin · GHSA-6jv7-28mv-qp9c

medium2022-02-16

CVE-2022-25196-Open redirect vulnerability in Jenkins GitLab Authentication Plugin

View chart →

jenkinsci/gitlab-oauth-plugin · GHSA-mvq8-hgxh-4v2g

high2022-02-16

CVE-2022-25198-CSRF vulnerability in Jenkins SCP publisher Plugin

View chart →

jenkinsci/scp-plugin · GHSA-7g7g-82fp-hpxx

medium2022-02-16

CVE-2022-25197-Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files

View chart →

jenkinsci/hashicorp-vault-plugin · GHSA-2587-w93g-63m2

high2022-02-16

CVE-2022-25199-Missing permission check in Jenkins SCP publisher Plugin

View chart →

jenkinsci/scp-plugin · GHSA-vj3j-8m6x-mjq6

medium2022-02-16

CVE-2022-25200-CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials

View chart →

jenkinsci/checkmarx-plugin · GHSA-5pcf-vxm3-frph

medium2022-02-16

CVE-2022-25201-Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials

View chart →

jenkinsci/checkmarx-plugin · GHSA-wwf6-x2rv-vxqh

medium2022-02-16

CVE-2022-25202-Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin

View chart →

jenkinsci/promoted-builds-simple-plugin · GHSA-gc7q-7vg3-h8gf

medium2022-02-16

CVE-2022-25203-Stored Cross-site Scripting vulnerability in Jenkins Team Views Plugin

View chart →

jenkinsci/team-views-plugin · GHSA-mv5c-724f-3fq7

medium2022-02-16

CVE-2022-25204-Protection Mechanism Failure in Jenkins Doktor Plugin

View chart →

jenkinsci/doktor-plugin · GHSA-64q9-f38h-9mwx

high2022-02-16

CVE-2022-25205-Cross-Site Request Forgery in Jenkins dbCharts Plugin

View chart →

jenkinsci/dbcharts-plugin · GHSA-vx6f-6rp6-f2px