Cloudbees الثغرات

التسلسل الزمني

النوع

منتج

CloudBees Jenkins64
CloudBees Docker Hub Registry Notification Plugin2
CloudBees AWS Credentials Plugin2
CloudBees Directory2
CloudBees Enterprise2

معالجة

Official Fix68
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined74

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent4
Network70

توثيق

Not Defined0
High0
Low16
None58

تفاعل المستخدم

Not Defined0
Required44
None30

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤524
≤610
≤714
≤810
≤94
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤48
≤524
≤620
≤710
≤84
≤94
≤104

VulDB

≤10
≤20
≤30
≤48
≤524
≤68
≤714
≤812
≤94
≤104

NVD

≤10
≤20
≤30
≤40
≤54
≤60
≤70
≤84
≤94
≤106

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k22
<2k34
<5k18
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k72
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (6): AWS Credentials Plugin (3), Directory (1), Docker Hub Registry Notification Plugin (1), Enterprise (1), Jenkins (67), Jenkins Operations Center (1)

Link to Vendor Website: https://www.cloudbees.com/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
15/11/20226.96.9CloudBees Docker Hub Registry Notification Plugin تجاوز الصلاحياتVirtualization SoftwareNot DefinedNot Defined0.000640.00CVE-2022-45385
16/03/20224.34.3CloudBees AWS Credentials Plugin طلب تزوير مشتركCloud SoftwareNot DefinedNot Defined0.000680.00CVE-2022-27198
16/03/20225.55.5CloudBees AWS Credentials Plugin تجاوز الصلاحياتJenkins PluginNot DefinedNot Defined0.000540.00CVE-2022-27199
18/03/20214.94.9CloudBees AWS Credentials Plugin تجاوز الصلاحياتJenkins PluginNot DefinedNot Defined0.000540.00CVE-2021-21625
19/04/20197.57.5CloudBees Jenkins Operations Center Configuration Page Credentials تجاوز الصلاحياتContinuous Integration SoftwareNot DefinedNot Defined0.005020.04CVE-2019-11350
17/05/20165.95.7CloudBees Jenkins API URL xml الكشف عن المعلوماتContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3727
17/05/20167.47.2CloudBees Jenkins RedirectContinuous Integration SoftwareNot DefinedOfficial Fix0.002680.02CVE-2016-3726
17/05/20165.95.7CloudBees Jenkins Updater تجاوز الصلاحياتContinuous Integration SoftwareNot DefinedOfficial Fix0.001550.00CVE-2016-3725
17/05/20167.06.8CloudBees Jenkins Job Configuration Password الكشف عن المعلوماتContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3724
17/05/20165.95.7CloudBees Jenkins XML/JSON API Endpoint الكشف عن المعلوماتContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3723

64 بعض الادخالات لم يتم عرضها

Might our Artificial Intelligence support you?

Check our Alexa App!