← Back

Jenkins

jenkins

1,822 CVEs • 693 products

Products (693)

Click to collapse
Toggle
Jenkins
jenkins
281 CVEs
Script Security
script_security
45 CVEs
Pipeline\
pipeline\
40 CVEs
Active Directory
active_directory
12 CVEs
Git
git
11 CVEs
Blue Ocean
blue_ocean
11 CVEs
Email Extension
email_extension
11 CVEs
Build Failure Analyzer
build_failure_analyzer
9 CVEs
Config File Provider
config_file_provider
9 CVEs
Configuration As Code
configuration_as_code
9 CVEs
Github Branch Source
github_branch_source
8 CVEs
Credentials Binding
credentials_binding
8 CVEs
Ns Nd Integration Performance Publisher
ns-nd_integration_performance_publisher
8 CVEs
Subversion
subversion
7 CVEs
Html Publisher
html_publisher
7 CVEs
Kubernetes
kubernetes
7 CVEs
Openid Connect Authentication
openid_connect_authentication
7 CVEs
Openshift Deployer
openshift_deployer
7 CVEs
Rundeck
rundeck
7 CVEs
Job Configuration History
job_configuration_history
7 CVEs
Saml Single Sign On
saml_single_sign-on
7 CVEs
Git Client
git_client
6 CVEs
Gerrit Trigger
gerrit_trigger
6 CVEs
Github Pull Request Builder
github_pull_request_builder
6 CVEs
Github
github
6 CVEs
Warnings Next Generation
warnings_next_generation
6 CVEs
Azure Vm Agents
azure_vm_agents
6 CVEs
Repository Connector
repository_connector
6 CVEs
Openid
openid
6 CVEs
Gitlab
gitlab
6 CVEs
Xebialabs Xl Deploy
xebialabs_xl_deploy
6 CVEs
Azure Ad
azure_ad
6 CVEs
Pipeline Maven Integration
pipeline_maven_integration
6 CVEs
Electricflow
electricflow
6 CVEs
Project Inheritance
project_inheritance
6 CVEs
Google Compute Engine
google_compute_engine
6 CVEs
Amazon Ec2
amazon_ec2
6 CVEs
Git Parameter
git_parameter
6 CVEs
Hashicorp Vault
hashicorp_vault
6 CVEs
Deployment Dashboard
deployment_dashboard
6 CVEs
Active Choices
active_choices
5 CVEs
Junit
junit
5 CVEs
Job And Node Ownership
job_and_node_ownership
5 CVEs
Mercurial
mercurial
5 CVEs
Promoted Builds
promoted_builds
5 CVEs
Mailer
mailer
5 CVEs
Google Login
google_login
5 CVEs
Jira
jira
5 CVEs
Job Import
job_import
5 CVEs
Matrix Project
matrix_project
5 CVEs
Websphere Deployer
websphere_deployer
5 CVEs
Chef Sinatra
chef_sinatra
5 CVEs
Mabl
mabl
5 CVEs
Assembla
assembla
5 CVEs
Neuvector Vulnerability Scanner
neuvector_vulnerability_scanner
5 CVEs
Cadence Vmanager
cadence_vmanager
5 CVEs
Delphix
delphix
5 CVEs
Support Core
support_core
5 CVEs
Fortify
fortify
5 CVEs
Appspider
appspider
5 CVEs
Scriptler
scriptler
5 CVEs
Publish Over Ssh
publish_over_ssh
5 CVEs
Extended Choice Parameter
extended_choice_parameter
5 CVEs
Octoperf Load Testing
octoperf_load_testing
5 CVEs
Wso2 Oauth
wso2_oauth
5 CVEs
Code Dx
code_dx
5 CVEs
Aws Codecommit Trigger
aws_codecommit_trigger
5 CVEs
Role Based Authorization Strategy
role-based_authorization_strategy
4 CVEs
Static Analysis Utilities
static_analysis_utilities
4 CVEs
Ssh
ssh
4 CVEs
Warnings
warnings
4 CVEs
Build Publisher
build-publisher
4 CVEs
Maven
maven
4 CVEs
Coverity
coverity
4 CVEs
Liquibase Runner
liquibase_runner
4 CVEs
Ansible
ansible
4 CVEs
S3 Publisher
s3_publisher
4 CVEs
Vmware Lab Manager Slaves
vmware_lab_manager_slaves
4 CVEs
Credentials
credentials
4 CVEs
Embeddable Build Status
embeddable_build_status
4 CVEs
Gogs
gogs
4 CVEs
Crx Content Package Deployer
crx_content_package_deployer
4 CVEs
Icescrum
icescrum
4 CVEs
Fortify On Demand
fortify_on_demand
4 CVEs
Bitbucket Oauth
bitbucket_oauth
4 CVEs
Kubernetes Ci
kubernetes_ci
4 CVEs
Team Concert
team_concert
4 CVEs
Rapiddeploy
rapiddeploy
4 CVEs
Health Advisor By Cloudbees
health_advisor_by_cloudbees
4 CVEs
P4
p4
4 CVEs
Subversion Partial Release Manager
subversion_partial_release_manager
4 CVEs
Deployer Framework
deployer_framework
4 CVEs
Gitlab Authentication
gitlab_authentication
4 CVEs
Team Foundation Server
team_foundation_server
4 CVEs
Requests
requests
4 CVEs
Bitbucket Branch Source
bitbucket_branch_source
4 CVEs
Checkmarx
checkmarx
4 CVEs
Convertigo Mobile Platform
convertigo_mobile_platform
4 CVEs
Kubernetes Continuous Deploy
kubernetes_continuous_deploy
4 CVEs
Proxmox
proxmox
4 CVEs

CVEs (1,822)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-34201
1Jenkins
1Convertigo Mobile Platform
Jun 17, 2026
Jun 23, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2022-34200
1Jenkins
1Convertigo Mobile Platform
Jun 17, 2026
Jun 23, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL.
CVE-2022-34199
1Jenkins
1Convertigo Mobile Platform
Jun 17, 2026
Jun 23, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the J...Show more
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.Show less
CVE-2022-34198
1Jenkins
1Stash Branch Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability e...Show more
Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34197
1Jenkins
1Sauce Ondemand
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability ex...Show more
Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34196
1Jenkins
1Rest List Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploit...Show more
Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34195
1Jenkins
1Repository Connector
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vuln...Show more
Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34194
1Jenkins
1Readonly Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS...Show more
Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34193
1Jenkins
1Package Version
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attack...Show more
Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34192
1Jenkins
1Ontrack
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting i...Show more
Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34191
1Jenkins
1Ns Nd Integration Performance Publisher
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerabil...Show more
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34190
1Jenkins
1Maven Metadata
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-s...Show more
Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34189
1Jenkins
1Image Tag Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploita...Show more
Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34188
1Jenkins
1Hidden Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exp...Show more
Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34187
1Jenkins
1Filesystem List Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS)...Show more
Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34186
1Jenkins
1Dynamic Extended Choice Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (...Show more
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34185
1Jenkins
1Date Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by at...Show more
Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34184
1Jenkins
1Crx Content Package Deployer
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XS...Show more
Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34183
1Jenkins
1Agent Server Parameter
Jun 17, 2026
Jun 23, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exp...Show more
Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2022-34182
1Jenkins
1Nested View
Jun 17, 2026
Jun 23, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.