Contrast Continuous Application Security

contrast_continuous_application_security

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-57299 1Jenkins 1Contrast Continuous Application Security Jul 6, 2026 Jun 24, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
CVE-2026-57297 1Jenkins 1Contrast Continuous Application Security Jul 6, 2026 Jun 24, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified use...Show more A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.Show less
CVE-2022-43420 1Jenkins 1Contrast Continuous Application Security Jun 17, 2026 Oct 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exp...Show more Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.Show less