Known vulnerabilities in Amazon EC2 1.38
Vendor:
Jenkins
Software:
Amazon EC2
Version:
1.38
Software CPE:
cpe:2.3:a:jenkins:amazon_ec2:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.3
Vulnerabilities by Severity
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.68
1.67
1.66
1.65
1.64
1.63
1.62
1.61
1.60.1
1.60
1.59
1.58
1.57
1.56
1.55
1.54
1.53
1.52
1.51
1.46.4
1.49.3
1.50.2.1
1.50.3
1.46.3
1.49.2
1.50.2
1.50.1
1.50
1.49.1
1.49
1.48
1.47
1.46.2
1.46.1
1.46
1.45
1.44.1
1.44
1.43
1.42.2
1.42.1
1.42
1.41.1
1.41
1.40.1
1.40
1.39
1.38
1.37
1.36
1.35
1.34
1.33
1.32
1.31
1.30
1.29
1.28
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20
1.19
1.18
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU27614 - Improper Authorization CVE-2020-2188 |
CWE-285 | Low | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27613 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-2187 |
CWE-300 | Medium | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27612 - Cross-Site Request Forgery (CSRF) CVE-2020-2186 |
CWE-352 | Low | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27611 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-2185 |
CWE-300 | Medium | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU24345 - Server-Side Request Forgery (SSRF) CVE-2020-2091 |
CWE-918 | Medium | 1.48 | 16.01.2020 |
SB2020011608 |
||
| #VU24343 - Cross-Site Request Forgery (CSRF) CVE-2020-2090 |
CWE-352 | Low | 1.48 | 16.01.2020 |
SB2020011608 |