← Back

Jenkins Ci

jenkins-ci

5 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Monitoring Plugin
monitoring_plugin
2 CVEs
Exclusion
exclusion
1 CVE
Build Failure Analyzer
build_failure_analyzer
1 CVE
Subversion Plugin
subversion-plugin
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3679
1Jenkins Ci
1Monitoring Plugin
May 6, 2026
Oct 16, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.
CVE-2014-3678
1Jenkins Ci
1Monitoring Plugin
May 6, 2026
Oct 10, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6372
1Jenkins Ci
1Subversion Plugin
May 6, 2026
May 8, 2014
N/A· v4
N/A· v3
2.1 LOW· v2
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
CVE-2013-6374
1Jenkins Ci
1Build Failure Analyzer
Apr 29, 2026
Nov 25, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6373
1Jenkins Ci
1Exclusion
Apr 29, 2026
Nov 25, 2013
N/A· v4
N/A· v3
5.5 MEDIUM· v2
The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.