Known vulnerabilities in Amazon EC2
Vendor:
Jenkins
Software:
Amazon EC2
Software CPE:
cpe:2.3:a:jenkins:amazon_ec2:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.3
Breakdown by Severity Chart
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.68
1.67
1.66
1.65
1.64
1.63
1.62
1.61
1.60.1
1.60
1.59
1.58
1.57
1.56
1.55
1.54
1.53
1.52
1.51
1.46.4
1.49.3
1.50.2.1
1.50.3
1.46.3
1.49.2
1.50.2
1.50.1
1.50
1.49.1
1.49
1.48
1.47
1.46.2
1.46.1
1.46
1.45
1.44.1
1.44
1.43
1.42.2
1.42.1
1.42
1.41.1
1.41
1.40.1
1.40
1.39
1.38
1.37
1.36
1.35
1.34
1.33
1.32
1.31
1.30
1.29
1.28
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20
1.19
1.18
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU27614 - Improper Authorization CVE-2020-2188 |
CWE-285 | Low | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27613 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-2187 |
CWE-300 | Medium | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27612 - Cross-Site Request Forgery (CSRF) CVE-2020-2186 |
CWE-352 | Low | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU27611 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-2185 |
CWE-300 | Medium | 1.50.2 | 07.05.2020 |
SB2020050723 |
||
| #VU24345 - Server-Side Request Forgery (SSRF) CVE-2020-2091 |
CWE-918 | Medium | 1.48 | 16.01.2020 |
SB2020011608 |
||
| #VU24343 - Cross-Site Request Forgery (CSRF) CVE-2020-2090 |
CWE-352 | Low | 1.48 | 16.01.2020 |
SB2020011608 |