Known vulnerabilities in Code Coverage API
Vendor:
Jenkins
Software:
Code Coverage API
Software CPE:
cpe:2.3:a:jenkins:code_coverage_api:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
4.99.0
4.11.0
4.10.0
4.9.0
4.8.0
4.7.0
4.6.0
4.5.0
4.4.0
4.3.0
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.5.0
3.4.2
3.4.1
3.3.2
3.4.0
3.3.1
3.3.0
3.2.0
3.1.0
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.4.1
1.3.3
1.4.0
1.3.2
1.3.1
1.2.1
1.2.0
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.13
1.0.12
1.0.11
1.0.10
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56227 - Deserialization of Untrusted Data CVE-2021-21677 |
CWE-502 | Medium | 1.4.1 | 01.09.2021 |
SB2021090104 |
||
| #VU26714 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-2172 |
CWE-611 | Medium | 1.1.5 | 08.04.2020 |
SB2020040814 |
||
| #VU24765 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2106 |
CWE-79 | Low | 1.1.3 | 30.01.2020 |
SB2020013006 |