Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

jenkins-ci CVEs

Beta · best-effort

5 CVEs tagged to vendor jenkins-ci — 0 Critical, 0 High, 3 Medium, 2 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2014-3679

Published Oct 16, 2014

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-3678

Published Oct 10, 2014

Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-6372

Published May 8, 2014

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.c…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2013-6374

Published Nov 25, 2013

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2013-6373

Published Nov 25, 2013

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecifi…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1