Overview 109 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 2 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
109
100.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
109
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
2
1.8%
No public exploit
107
98.2%
split by
peak 30 / year
20196
No exploit published6
High1
Medium4
Low1
not blocked6
No public exploit6
20208
No exploit published8
High1
Medium7
not blocked8
No public exploit8
20215
No exploit published5
Medium5
not blocked5
No public exploit5
202228
No exploit published28
Critical2
High5
Medium21
not blocked28
No public exploit28
202330
No exploit published30
High13
Medium15
Low2
not blocked30
Forecast only1
No public exploit29
20246
No exploit published6
High2
Medium4
not blocked6
Forecast only1
No public exploit5
202519
No exploit published19
Critical1
High2
Medium14
Low2
not blocked19
No public exploit19
20267
No exploit published7
High1
Medium6
not blocked7
No public exploit7
20192020202120222023202420252026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2020-2194 | Medium | 2020-06-03 | No exploit published | No public exploit | Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability. |
| CVE-2020-2193 | Medium | 2020-06-03 | No exploit published | No public exploit | Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in a stored cross-site scripting vulnerability. |
| CVE-2020-2106 | Medium | 2020-01-29 | No exploit published | No public exploit | Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations. |
| CVE-2019-10447 | Medium | 2019-10-16 | No exploit published | No public exploit | Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. |
| CVE-2019-10433 | Low | 2019-10-01 | No exploit published | No public exploit | Jenkins Dingding[钉钉] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. |
| CVE-2019-10430 | Medium | 2019-09-25 | No exploit published | No public exploit | Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system. |
| CVE-2019-10326 | Medium | 2019-05-31 | No exploit published | No public exploit | A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds. |
| CVE-2019-1003023 | Medium | 2019-02-06 | No exploit published | No public exploit | A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourcePrinter.java, src/main/java/io/jenkins/plugins/analysis/core/util/Sanitizer.java, src/main/java/io/jenkins/plugins/analysis/warnings/DuplicateCodeScanner.java that allows attackers with the ability to control warnings parser input to have Jenkins render arbitrary HTML. |
| CVE-2019-1003008 | High | 2019-02-06 | No exploit published | No public exploit | A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint. |