Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

jenkins jenkins vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2012-0324

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.454, Jenkins LTS prior to 1.424.5, and Jenkins Enterprise 1.400.x prior to 1.400.0.13 and 1.424.x prior to 1.424.5.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, a diff...
Cloudbees Jenkins 1.424Cloudbees Jenkins 1.424.5Cloudbees Jenkins 1.400Cloudbees Jenkins 1.400.0.12Cloudbees JenkinsJenkins Jenkins 1.384Jenkins Jenkins 1.383Jenkins Jenkins 1.382Jenkins Jenkins 1.389Jenkins Jenkins 1.388Jenkins Jenkins 1.387Jenkins Jenkins 1.386Jenkins Jenkins 1.404Jenkins Jenkins 1.403Jenkins Jenkins 1.402Jenkins Jenkins 1.401Jenkins Jenkins 1.408Jenkins Jenkins 1.407Jenkins Jenkins 1.406Jenkins Jenkins 1.405Jenkins Jenkins 1.400Jenkins Jenkins 1.316
4.3
CVSSv2

CVE-2012-0325

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.454, Jenkins LTS prior to 1.424.5, and Jenkins Enterprise 1.400.x prior to 1.400.0.13 and 1.424.x prior to 1.424.5.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, a diff...
Cloudbees JenkinsJenkins Jenkins 1.384Jenkins Jenkins 1.383Jenkins Jenkins 1.382Jenkins Jenkins 1.389Jenkins Jenkins 1.388Jenkins Jenkins 1.387Jenkins Jenkins 1.386Jenkins Jenkins 1.404Jenkins Jenkins 1.403Jenkins Jenkins 1.402Jenkins Jenkins 1.401Jenkins Jenkins 1.408Jenkins Jenkins 1.407Jenkins Jenkins 1.406Jenkins Jenkins 1.405Jenkins Jenkins 1.400Jenkins Jenkins 1.316Jenkins Jenkins 1.437Jenkins Jenkins 1.315Jenkins Jenkins 1.436Jenkins Jenkins 1.314
2.6
CVSSv2

CVE-2013-0158

Unspecified vulnerability in Jenkins prior to 1.498, Jenkins LTS prior to 1.480.2, and Jenkins Enterprise 1.447.x prior to 1.447.6.1 and 1.466.x prior to 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote malicious users to obtain the master ...
Cloudbees JenkinsJenkins Jenkins 1.404Jenkins Jenkins 1.403Jenkins Jenkins 1.402Jenkins Jenkins 1.401Jenkins Jenkins 1.408Jenkins Jenkins 1.407Jenkins Jenkins 1.406Jenkins Jenkins 1.405Jenkins Jenkins 1.400Jenkins Jenkins 1.437Jenkins Jenkins 1.436Jenkins Jenkins 1.435Jenkins Jenkins 1.434Jenkins Jenkins 1.433Jenkins Jenkins 1.432Jenkins Jenkins 1.431Jenkins Jenkins 1.430Jenkins Jenkins 1.409Jenkins Jenkins 1.415Jenkins Jenkins 1.414Jenkins Jenkins 1.413
5.8
CVSSv2

CVE-2012-6073

Open redirect vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to redirect users to arbitrary web sites and conduct ...
Cloudbees Jenkins 1.447.1.1Cloudbees Jenkins 1.447.2.2Cloudbees Jenkins 1.447.3.1Cloudbees Jenkins 1.424Cloudbees Jenkins 1.400Cloudbees Jenkins 1.447Jenkins JenkinsJenkins Jenkins 1.424.2Jenkins Jenkins 1.424.1Jenkins Jenkins 1.424.4Jenkins Jenkins 1.424.3Jenkins Jenkins 1.466.1Jenkins Jenkins 1.447.2Jenkins Jenkins 1.447.1Jenkins Jenkins 1.409.2Jenkins Jenkins 1.409.3Jenkins Jenkins 1.424.6Jenkins Jenkins 1.424.5Jenkins Jenkins 1.409.1Cloudbees Jenkins 1.424.6.1Cloudbees Jenkins 1.424.0.4Cloudbees Jenkins 1.424.1.1
4.3
CVSSv2

CVE-2012-6072

CRLF injection vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP re...
Cloudbees Jenkins 1.447.1.1Cloudbees Jenkins 1.447.2.2Cloudbees Jenkins 1.447.3.1Cloudbees Jenkins 1.424Cloudbees Jenkins 1.400Cloudbees Jenkins 1.447Jenkins JenkinsJenkins Jenkins 1.424.2Jenkins Jenkins 1.424.1Jenkins Jenkins 1.424.4Jenkins Jenkins 1.424.3Jenkins Jenkins 1.466.1Jenkins Jenkins 1.447.2Jenkins Jenkins 1.447.1Jenkins Jenkins 1.409.2Jenkins Jenkins 1.409.3Jenkins Jenkins 1.424.6Jenkins Jenkins 1.424.5Jenkins Jenkins 1.409.1Cloudbees Jenkins 1.466.2.1Cloudbees Jenkins 1.466.1.2Cloudbees Jenkins
3.5
CVSSv2

CVE-2012-6074

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote authenticated users with write access to inject arbitrar...
Cloudbees JenkinsJenkins Jenkins 1.404Jenkins Jenkins 1.403Jenkins Jenkins 1.402Jenkins Jenkins 1.401Jenkins Jenkins 1.408Jenkins Jenkins 1.407Jenkins Jenkins 1.406Jenkins Jenkins 1.405Jenkins Jenkins 1.400Jenkins Jenkins 1.437Jenkins Jenkins 1.436Jenkins Jenkins 1.435Jenkins Jenkins 1.434Jenkins Jenkins 1.433Jenkins Jenkins 1.432Jenkins Jenkins 1.431Jenkins Jenkins 1.430Jenkins Jenkins 1.409Jenkins Jenkins 1.415Jenkins Jenkins 1.414Jenkins Jenkins 1.413
2.6
CVSSv2

CVE-2017-1000092

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciou...
Jenkins Git 3.3.1Jenkins Git 0.1.0Jenkins Git 0.2.0Jenkins Git 0.3.0Jenkins Git 0.4.0Jenkins Git 0.5.0Jenkins Git 0.6.0Jenkins Git 0.7.0Jenkins Git 0.7.1Jenkins Git 0.7.2Jenkins Git 0.7.3Jenkins Git 0.8.0Jenkins Git 0.8.1Jenkins Git 0.8.2Jenkins Git 0.9.0Jenkins Git 0.9.1Jenkins Git 0.9.2Jenkins Git 1.0.0Jenkins Git 1.0.1Jenkins Git 1.1.0Jenkins Git 1.1.1Jenkins Git 1.1.2
2.6
CVSSv2

CVE-2011-4344

Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins prior to 1.438, and 1.409 LTS prior to 1.409.3 LTS, when a stand-alone container is used, allows remote malicious users to inject arbitrary web script or HTML via vectors related to error messages.
Jenkins Jenkins 1.409.1Jenkins Jenkins 1.409.2Jenkins Jenkins
6.8
CVSSv2

CVE-2017-1000503

A race condition during Jenkins 2.81 up to and including 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted ...
Jenkins Jenkins 2.89.1Jenkins Jenkins
4
CVSSv2

CVE-2017-1000084

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
Jenkins Parameterized Trigger 1.0Jenkins Parameterized Trigger 1.1Jenkins Parameterized Trigger 1.2Jenkins Parameterized Trigger 1.3Jenkins Parameterized Trigger 1.4Jenkins Parameterized Trigger 1.5Jenkins Parameterized Trigger 1.6Jenkins Parameterized Trigger 2.0Jenkins Parameterized Trigger 2.1Jenkins Parameterized Trigger 2.2Jenkins Parameterized Trigger 2.3Jenkins Parameterized Trigger 2.4Jenkins Parameterized Trigger 2.5Jenkins Parameterized Trigger 2.6Jenkins Parameterized Trigger 2.7Jenkins Parameterized Trigger 2.8Jenkins Parameterized Trigger 2.9Jenkins Parameterized Trigger 2.10Jenkins Parameterized Trigger 2.11Jenkins Parameterized Trigger 2.12Jenkins Parameterized Trigger 2.13Jenkins Parameterized Trigger 2.14
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-44685CVE-2024-44053CVE-2024-8522CVE-2024-44059CVE-2024-8059CVE-2024-8503localopen redirectTCP
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook