← Back

Static Analysis Utilities

static_analysis_utilities

Vendor: Jenkins • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-2316
1Jenkins
1Static Analysis Utilities
Jun 17, 2026
Nov 4, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure per...Show more
Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.Show less
CVE-2019-10308
1Jenkins
1Static Analysis Utilities
Jun 17, 2026
Apr 30, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job...Show more
A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users.Show less
CVE-2019-10307
1Jenkins
1Static Analysis Utilities
Jun 17, 2026
Apr 30, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default grap...Show more
A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default graph configuration for all users.Show less
CVE-2017-1000102
1Jenkins
1Static Analysis Utilities
May 13, 2026
Oct 5, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console ou...Show more
The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.Show less