Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cloudbees vulnerabilities and exploits
(subscribe to this query)
6
CVSSv2
CVE-2022-27198
A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and previous versions allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
Jenkins Cloudbees Aws Credentials 1.32
Jenkins Cloudbees Aws Credentials
5
CVSSv2
CVE-2015-1809
XML external entity (XXE) vulnerability in CloudBees Jenkins prior to 1.600 and LTS prior to 1.596.1 allows remote malicious users to read arbitrary XML files via an XPath query.
Jenkins Cloudbees
5
CVSSv2
CVE-2015-1811
XML external entity (XXE) vulnerability in CloudBees Jenkins prior to 1.600 and LTS prior to 1.596.1 allows remote malicious users to read arbitrary XML files via a crafted XML document.
Jenkins Cloudbees
4.3
CVSSv2
CVE-2012-6072
CRLF injection vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP re...
Cloudbees Jenkins 1.447.2.2
Cloudbees Jenkins 1.447.3.1
Cloudbees Jenkins 1.447.1.1
Jenkins Jenkins 1.409.1
Cloudbees Jenkins 1.400
Jenkins Jenkins 1.409.3
Jenkins Jenkins 1.447.1
Jenkins Jenkins 1.424.6
Jenkins Jenkins 1.424.5
Jenkins Jenkins 1.424.4
Jenkins Jenkins 1.424.3
Jenkins Jenkins
Jenkins Jenkins 1.447.2
Jenkins Jenkins 1.424.1
Cloudbees Jenkins 1.424
Jenkins Jenkins 1.409.2
Jenkins Jenkins 1.466.1
Jenkins Jenkins 1.424.2
Cloudbees Jenkins 1.447
Cloudbees Jenkins 1.466.2.1
Cloudbees Jenkins 1.466.1.2
Jenkins Jenkins 1.432
5.8
CVSSv2
CVE-2012-6073
Open redirect vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to redirect users to arbitrary web sites and conduct ...
Cloudbees Jenkins 1.447.2.2
Cloudbees Jenkins 1.447.3.1
Cloudbees Jenkins 1.447.1.1
Jenkins Jenkins 1.424.6
Jenkins Jenkins 1.424.5
Jenkins Jenkins 1.424.4
Jenkins Jenkins 1.424.3
Jenkins Jenkins 1.409.1
Cloudbees Jenkins 1.400
Jenkins Jenkins 1.409.3
Jenkins Jenkins
Jenkins Jenkins 1.447.2
Jenkins Jenkins 1.424.1
Cloudbees Jenkins 1.424
Jenkins Jenkins 1.409.2
Jenkins Jenkins 1.466.1
Jenkins Jenkins 1.447.1
Jenkins Jenkins 1.424.2
Cloudbees Jenkins 1.447
Cloudbees Jenkins 1.424.2.1
Cloudbees Jenkins 1.424.4.1
Cloudbees Jenkins 1.424.5.1
3.5
CVSSv2
CVE-2012-6074
Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote authenticated users with write access to inject arbitrar...
Cloudbees Jenkins
Jenkins Jenkins 1.404
Jenkins Jenkins 1.403
Jenkins Jenkins 1.402
Jenkins Jenkins 1.401
Jenkins Jenkins 1.408
Jenkins Jenkins 1.407
Jenkins Jenkins 1.406
Jenkins Jenkins 1.405
Jenkins Jenkins 1.400
Jenkins Jenkins 1.437
Jenkins Jenkins 1.436
Jenkins Jenkins 1.435
Jenkins Jenkins 1.434
Jenkins Jenkins 1.433
Jenkins Jenkins 1.432
Jenkins Jenkins 1.431
Jenkins Jenkins 1.430
Jenkins Jenkins 1.409
Jenkins Jenkins 1.415
Jenkins Jenkins 1.414
Jenkins Jenkins 1.413
NA
CVE-2023-46654
Jenkins CloudBees CD Plugin 1.1.32 and previous versions follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitr...
Jenkins Cloudbees Cd
NA
CVE-2023-46655
Jenkins CloudBees CD Plugin 1.1.32 and previous versions follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish ar...
Jenkins Cloudbees Cd
4
CVSSv2
CVE-2021-21647
Jenkins CloudBees CD Plugin 1.1.21 and previous versions does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.
Jenkins Cloudbees Cd
4
CVSSv2
CVE-2022-27199
A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and previous versions allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
Jenkins Cloudbees Aws Credentials
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »