WaratekVRT Sign in

Simple Queue CVEs

2 CVEs

Reset
More filters (1)
Columns
Product simple queue✕
Overview 2 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5
2matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 100.0%
Critical 0 0.0% High 1 50.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 50.0% No public exploit 1 50.0%
split by peak 1 / month
No exploit published: 2 Medium: 1High: 1 not blocked: 2 No public exploit: 1Forecast only: 1
Nov 241 No exploit published1 High1 not blocked1 Forecast only1 Dec 240 Jan 250 Feb 250 Mar 250 Apr 251 No exploit published1 Medium1 not blocked1 No public exploit1
Nov 24Dec 24Jan 25Feb 25Mar 25Apr 25
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-31723 Medium 2025-04-02 No exploit published No public exploit A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.
CVE-2024-54003 High 2024-11-27 No exploit published Forecast only Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Create permission.