Jenkins Sårbarheter

Tidslinje

Förra året

Version

2.0	36
2.1	36
2.2	35
2.43	33
2.3	27

Åtgärd

Official Fix	131
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	134

Utnyttjbarhet

High	6
Functional	0
Proof-of-Concept	8
Unproven	0
Not Defined	252

Åtkomstvektor

Not Defined	0
Physical	0
Local	6
Adjacent	42
Network	218

Autentisering

Not Defined	0
High	6
Low	145
None	115

Användarinteraktion

Not Defined	0
Required	109
None	157

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	13
≤5	87
≤6	86
≤7	43
≤8	27
≤9	6
≤10	3

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	13
≤5	88
≤6	96
≤7	41
≤8	19
≤9	6
≤10	2

VulDB

≤1	0
≤2	0
≤3	4
≤4	57
≤5	63
≤6	70
≤7	40
≤8	25
≤9	4
≤10	3

NVD

≤1	0
≤2	0
≤3	1
≤4	2
≤5	36
≤6	59
≤7	36
≤8	20
≤9	30
≤10	8

CNA

≤1	0
≤2	0
≤3	1
≤4	3
≤5	8
≤6	4
≤7	2
≤8	0
≤9	1
≤10	1

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	79
<2k	135
<5k	52
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	264
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (266): 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35, 1.36, 1.37, 1.309, 1.399, 1.423, 1.424, 1.424.0.1, 1.424.1, 1.424.2, 1.424.3, 1.424.4, 1.466, 1.480, 1.481, 1.497, 1.509, 1.513, 1.523, 1.532.1, 1.549, 1.550, 1.585, 1.586, 1.625, 1.625.1, 1.637, 1.639, 1.649, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.21, 2.22, 2.23, 2.24, 2.25, 2.26, 2.27, 2.28, 2.29, 2.30, 2.31, 2.32, 2.32.1, 2.33, 2.34, 2.35, 2.36, 2.37, 2.38, 2.39, 2.40, 2.41, 2.42, 2.43, 2.44, 2.45, 2.46, 2.46.1, 2.47, 2.48, 2.49, 2.50, 2.51, 2.52, 2.53, 2.54, 2.55, 2.56, 2.57, 2.58, 2.59, 2.60, 2.61, 2.62, 2.63, 2.64, 2.65, 2.66, 2.67, 2.68, 2.69, 2.70, 2.71, 2.72, 2.73, 2.73.1, 2.73.2, 2.74, 2.75, 2.76, 2.77, 2.78, 2.79, 2.80, 2.81, 2.82, 2.83, 2.84, 2.85, 2.86, 2.87, 2.88, 2.89, 2.89.1, 2.90, 2.91, 2.92, 2.93, 2.94, 2.106, 2.115, 2.120, 2.121, 2.121.1, 2.121.2, 2.132, 2.137, 2.145, 2.150.1, 2.150.2.3, 2.153, 2.158, 2.159, 2.170, 2.171, 2.185, 2.191, 2.196, 2.213, 2.218, 2.227, 2.244, 2.251, 2.274, 2.275, 2.286, 2.299, 2.314, 2.318, 2.319, 2.319.1, 2.319.2, 2.329, 2.355, 2.367, 2.368, 2.369, 2.399, 2.415, 2.423, 2.426, 2.426.1, 2.426.2, 2.441, LTE 2.107, LTE 2.107.1, LTS 1.466, LTS 1.466.1, LTS 1.651, LTS 1.651.1, LTS 2.89, LTS 2.89.1, LTS 2.89.2, LTS 2.89.3, LTS 2.107, LTS 2.107.1, LTS 2.107.2, LTS 2.138, LTS 2.138.1, LTS 2.138.2, LTS 2.138.3, LTS 2.176, LTS 2.176.1, LTS 2.176.2, LTS 2.176.3, LTS 2.204, LTS 2.204.1, LTS 2.204.2, LTS 2.204.3, LTS 2.204.4, LTS 2.204.5, LTS 2.235, LTS 2.235.1, LTS 2.235.2, LTS 2.235.3, LTS 2.263, LTS 2.263.1, LTS 2.263.2, LTS 2.277, LTS 2.277.1, LTS 2.289, LTS 2.289.1, LTS 2.303, LTS 2.303.1, LTS 2.303.2, LTS 2.319, LTS 2.319.1, LTS 2.332, LTS 2.332.1, LTS 2.332.2, LTS 2.332.3, LTS 2.333, LTS 2.387, LTS 2.387.1, LTS 2.387.2, LTS 2.387.3, LTS 2.401, LTS 2.401.1, LTS 2.401.2, LTS 2.414, LTS 2.414.1

Programvarutyp: Continuous Integration Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
07/08/2024	6.3	6.1	Jenkins My Views privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2024-43045
07/08/2024	6.1	6.1	Jenkins Agent Process ClassLoaderProxy#fetchJar informationsgivning	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2024-43044
24/01/2024	7.5	7.4	Jenkins Command Line Interface svag autentisering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2024-23898
24/01/2024	7.7	7.7	Jenkins Command Line Interface informationsgivning	$0-$5k	$0-$5k	High	Official Fix	0.04	CVE-2024-23897
20/09/2023	7.1	7.1	Jenkins Temporary Directory privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-43496
20/09/2023	4.4	4.4	Jenkins Caption Parameter ExpandableDetailsNote cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-43495
20/09/2023	6.8	6.7	Jenkins MultipartFormDataParser privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-43498
20/09/2023	6.8	6.8	Jenkins Stapler Web Framework privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-43497
20/09/2023	3.9	3.9	Jenkins Build Variable privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-43494
26/07/2023	4.4	4.4	Jenkins URL cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-39151
14/06/2023	5.5	5.5	Jenkins POST Request privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-35141
11/03/2023	4.4	4.4	Jenkins Version cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-27898
11/03/2023	6.1	6.1	Jenkins Local Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27899
11/03/2023	4.4	4.4	Jenkins Agent Connection informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27904
11/03/2023	5.0	5.0	Jenkins CLI privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27903
11/03/2023	5.5	5.5	Jenkins Job Workspace privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27902
11/03/2023	5.5	5.5	Jenkins Apache Commons FileUpload förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27901
11/03/2023	5.5	5.5	Jenkins Apache Commons FileUpload förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-27900
22/09/2022	4.4	4.4	Jenkins Tooltip cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-41224
27/07/2022	4.4	4.4	Maven Metadata Plugin for Jenkins CI Server URL Validation cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-36905
24/06/2022	4.4	4.4	Maven Metadata Plugin for Jenkins CI Server List Maven Artifact Versions cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-34190
24/06/2022	4.8	4.8	Jenkins Build Button cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-34173
24/06/2022	4.8	4.8	Jenkins Symbol-based Icons cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-34172
24/06/2022	4.8	4.8	Jenkins SVG Icon cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-34171
24/06/2022	4.8	4.8	Jenkins Help Icon cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-34170

Jenkins Sårbarheter

Tidslinje

Förra året

Version

Åtgärd

Utnyttjbarhet

Åtkomstvektor

Autentisering

Användarinteraktion

C3BM Index

Förra året

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Säljare

Research

Utnyttja 0-dagars

Utnyttja idag

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

🔒 Login Required

Are you interested in using VulDB?