Known vulnerabilities in Blue Ocean
Vendor:
Jenkins
Software:
Blue Ocean
Software CPE:
cpe:2.3:a:jenkins:blue_ocean:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.1
Breakdown by Severity Chart
1.27.6
1.27.5.1
1.27.5
1.27.4.1
1.27.4
1.27.3
1.27.2
1.27.1
1.27.0
1.26.0
1.25.8
1.25.7
1.25.6
1.25.5.2
1.25.5.1
1.25.5
1.25.4
1.25.3
1.25.2
1.25.1
1.25.0.1
1.25.0
1.24.8
1.24.7
1.24.6
1.24.5
1.24.4
1.24.3
1.24.2
1.24.1
1.0
1.24.0
1.23.3
1.23.2
1.23.1
1.23.0
1.22.0
1.22
1.21.0
1.19.2
1.19.0
1.18.1
1.18.0
1.17.0
1.16.0
1.15.1
1.15.0
1.14.0
1.13.2
1.13.1
1.13.0
1.11.1
1.11.0
1.10.2
1.10.1
1.10.0
1.9.1
1.9.0
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.2
1.7.1
1.7.0
1.6.2
1.6.1
1.6.0
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.2
1.4.1
1.4.0
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.1
1.0.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU79891 - Cross-Site Request Forgery (CSRF) CVE-2023-40341 |
CWE-352 | Low | 1.27.5.1 | 23.08.2023 |
SB2023082325 SB2024021216 SB2024021217 |
||
| #VU63377 - Improper Access Control CVE-2022-30954 |
CWE-284 | Low | 1.25.4 | 18.05.2022 |
SB2022051814 SB2023011328 SB2023020889 and 5 more |
||
| #VU63375 - Cross-Site Request Forgery (CSRF) CVE-2022-30953 |
CWE-352 | Low | 1.25.4 | 18.05.2022 |
SB2022051814 SB2023011328 SB2023020889 and 5 more |
||
| #VU46880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-2254 |
CWE-22 | Low | 1.23.3 | 16.09.2020 |
SB2020092202 SB2020111704 |
||
| #VU46881 - Permissions, Privileges, and Access Controls CVE-2020-2255 |
CWE-264 | Low | 1.23.3 | 16.09.2020 |
SB2020092202 SB2020111704 |