WaratekVRT Sign in
Reset
More filters (1)
Columns
Product openshift✕
Overview 107 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
107matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 107 100.0%
Critical 5 4.7% High 36 33.6% Medium 63 58.9% Low 3 2.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 107 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 107 100.0%
split by peak 20 / year
No exploit published: 107 Low: 3Medium: 63High: 36Critical: 5 not blocked: 107 No public exploit: 107
20147 No exploit published7 High1 Medium6 not blocked7 No public exploit7 201513 No exploit published13 High2 Medium10 Low1 not blocked13 No public exploit13 201613 No exploit published13 Critical1 High4 Medium8 not blocked13 No public exploit13 20170 20186 No exploit published6 High2 Medium4 not blocked6 No public exploit6 201920 No exploit published20 Critical2 High9 Medium9 not blocked20 No public exploit20 202015 No exploit published15 Critical1 High5 Medium9 not blocked15 No public exploit15 20215 No exploit published5 High1 Medium2 Low2 not blocked5 No public exploit5 202210 No exploit published10 High3 Medium7 not blocked10 No public exploit10 202314 No exploit published14 Critical1 High7 Medium6 not blocked14 No public exploit14 20243 No exploit published3 High2 Medium1 not blocked3 No public exploit3 20251 No exploit published1 Medium1 not blocked1 No public exploit1
201420152016201720182019202020212022202320242025
107 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2014-3680 Medium 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.
CVE-2014-3667 Medium 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.
CVE-2014-3666 High 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.
CVE-2014-3663 Medium 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.
CVE-2014-3662 Medium 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.
CVE-2014-3661 Medium 2014-10-16 No exploit published No public exploit Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.
CVE-2014-3681 Medium 2014-10-15 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
‹ prev page 2 of 2 next ›