Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cloudbees vulnerabilities and exploits
(subscribe to this query)
8
CVSSv3
CVE-2022-27198
A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and previous versions allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
Jenkins Cloudbees Aws Credentials 1.32
Jenkins Cloudbees Aws Credentials
7.5
CVSSv3
CVE-2015-1809
XML external entity (XXE) vulnerability in CloudBees Jenkins prior to 1.600 and LTS prior to 1.596.1 allows remote malicious users to read arbitrary XML files via an XPath query.
Jenkins Cloudbees
7.5
CVSSv3
CVE-2015-1811
XML external entity (XXE) vulnerability in CloudBees Jenkins prior to 1.600 and LTS prior to 1.596.1 allows remote malicious users to read arbitrary XML files via a crafted XML document.
Jenkins Cloudbees
NA
CVE-2012-6072
CRLF injection vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP re...
Cloudbees Jenkins 1.447.2.2
Cloudbees Jenkins 1.447.3.1
Cloudbees Jenkins 1.447.1.1
Jenkins Jenkins 1.409.1
Cloudbees Jenkins 1.400
Jenkins Jenkins 1.409.3
Jenkins Jenkins 1.447.1
Jenkins Jenkins 1.424.6
Jenkins Jenkins 1.424.5
Jenkins Jenkins 1.424.4
Jenkins Jenkins 1.424.3
Jenkins Jenkins
Jenkins Jenkins 1.447.2
Jenkins Jenkins 1.424.1
Cloudbees Jenkins 1.424
Jenkins Jenkins 1.409.2
Jenkins Jenkins 1.466.1
Jenkins Jenkins 1.424.2
Cloudbees Jenkins 1.447
Cloudbees Jenkins 1.466.2.1
Cloudbees Jenkins 1.466.1.2
Jenkins Jenkins 1.432
NA
CVE-2012-6073
Open redirect vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to redirect users to arbitrary web sites and conduct ...
Cloudbees Jenkins 1.447.2.2
Cloudbees Jenkins 1.447.3.1
Cloudbees Jenkins 1.447.1.1
Jenkins Jenkins 1.424.6
Jenkins Jenkins 1.424.5
Jenkins Jenkins 1.424.4
Jenkins Jenkins 1.424.3
Jenkins Jenkins 1.409.1
Cloudbees Jenkins 1.400
Jenkins Jenkins 1.409.3
Jenkins Jenkins
Jenkins Jenkins 1.447.2
Jenkins Jenkins 1.424.1
Cloudbees Jenkins 1.424
Jenkins Jenkins 1.409.2
Jenkins Jenkins 1.466.1
Jenkins Jenkins 1.447.1
Jenkins Jenkins 1.424.2
Cloudbees Jenkins 1.447
Cloudbees Jenkins 1.424.2.1
Cloudbees Jenkins 1.424.4.1
Cloudbees Jenkins 1.424.5.1
NA
CVE-2012-6074
Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote authenticated users with write access to inject arbitrar...
Cloudbees Jenkins
Jenkins Jenkins 1.404
Jenkins Jenkins 1.403
Jenkins Jenkins 1.402
Jenkins Jenkins 1.401
Jenkins Jenkins 1.408
Jenkins Jenkins 1.407
Jenkins Jenkins 1.406
Jenkins Jenkins 1.405
Jenkins Jenkins 1.400
Jenkins Jenkins 1.437
Jenkins Jenkins 1.436
Jenkins Jenkins 1.435
Jenkins Jenkins 1.434
Jenkins Jenkins 1.433
Jenkins Jenkins 1.432
Jenkins Jenkins 1.431
Jenkins Jenkins 1.430
Jenkins Jenkins 1.409
Jenkins Jenkins 1.415
Jenkins Jenkins 1.414
Jenkins Jenkins 1.413
8.1
CVSSv3
CVE-2023-46654
Jenkins CloudBees CD Plugin 1.1.32 and previous versions follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitr...
Jenkins Cloudbees Cd
6.5
CVSSv3
CVE-2023-46655
Jenkins CloudBees CD Plugin 1.1.32 and previous versions follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish ar...
Jenkins Cloudbees Cd
4.3
CVSSv3
CVE-2021-21647
Jenkins CloudBees CD Plugin 1.1.21 and previous versions does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.
Jenkins Cloudbees Cd
4.3
CVSSv3
CVE-2021-21625
Jenkins CloudBees AWS Credentials Plugin 1.28 and previous versions does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances.
Jenkins Cloudbees Aws Credentials
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »