Known vulnerabilities in jenkins (Alpine package)

Vendor: Alpine Linux Development Team
Software: jenkins (Alpine package)
Software CPE: cpe:2.3:o:alpine:jenkins_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jenkins (Alpine package) jenkins (Alpine package) is affected by 30 known vulnerabilities: 1 high, 5 medium, 24 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615		 CWE-367 Medium
No
No
 2.281-r0 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611		 CWE-79 Low
No
No
 2.275-r0 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610		 CWE-79 Low
No
No
 2.275-r0 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608		 CWE-79 Low
No
No
 2.275-r0 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603		 CWE-79 Low
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604		 CWE-91 Medium
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602		 CWE-200 Medium
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605		 CWE-22 Medium
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606		 CWE-264 Low
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607		 CWE-119 Medium
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609		 CWE-264 Low
No
No
 2.275-r0 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU49542 - Cleartext Storage of Sensitive Information
CVE-2021-21612		 CWE-312 Low
No
No
 2.275-r0 13.01.2021 SB2021011414
SB20210120111
#VU49543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21613		 CWE-79 Low
No
No
 2.275-r0 13.01.2021 SB2021011416
SB20210120112
#VU49544 - Cleartext Storage of Sensitive Information
CVE-2021-21614		 CWE-312 Low
No
No
 2.275-r0 13.01.2021 SB2021011417
SB20210120113
#VU30129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2223		 CWE-79 Low
No
No
 2.245-r0 16.07.2020 SB20200716112
SB2020082409
SB2020071911
and 2 more
#VU30128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2222		 CWE-79 Low
No
No
 2.245-r0 16.07.2020 SB20200716112
SB2020082409
SB2020071910
and 2 more
#VU30127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2221		 CWE-79 Low
No
No
 2.245-r0 16.07.2020 SB20200716112
SB2020082409
SB2020071909
and 2 more
#VU30126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2220		 CWE-79 Low
No
No
 2.245-r0 16.07.2020 SB20200716112
SB2020082409
SB2020071908
and 2 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163		 CWE-79 Low
No
No
 2.228-r0 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162		 CWE-79 Low
No
No
 2.228-r0 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more


Showing elements 1 - 20 out of 30