Known vulnerabilities in Blue Ocean

Vendor: Jenkins
Software: Blue Ocean
Software CPE: cpe:2.3:a:jenkins:blue_ocean:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Blue Ocean Blue Ocean is affected by 5 known vulnerabilities: 5 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79891 - Cross-Site Request Forgery (CSRF)
CVE-2023-40341
CWE-352 Low
No
No
1.27.5.1 23.08.2023 SB2023082325
SB2024021216
SB2024021217
#VU63377 - Improper Access Control
CVE-2022-30954
CWE-284 Low
No
No
1.25.4 18.05.2022 SB2022051814
SB2023011328
SB2023020889
and 5 more
#VU63375 - Cross-Site Request Forgery (CSRF)
CVE-2022-30953
CWE-352 Low
No
No
1.25.4 18.05.2022 SB2022051814
SB2023011328
SB2023020889
and 5 more
#VU46880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-2254
CWE-22 Low
No
No
1.23.3 16.09.2020 SB2020092202
SB2020111704
#VU46881 - Permissions, Privileges, and Access Controls
CVE-2020-2255
CWE-264 Low
No
No
1.23.3 16.09.2020 SB2020092202
SB2020111704