Known vulnerabilities in Credentials Binding

Vendor: Jenkins
Software: Credentials Binding
Software CPE: cpe:2.3:a:jenkins:credentials_binding:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Credentials Binding Credentials Binding is affected by 7 known vulnerabilities: 5 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132684 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-48922		 CWE-22 Medium
No
No
 725.ve52b_2328a_fde 28.05.2026 SB20260528282
#VU129238 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42520		 CWE-22 Medium
No
No
 720.v3f6decef43ea_ 04.05.2026 SB2026050407
#VU113400 - Insufficiently Protected Credentials
CVE-2025-53650		 CWE-522 Medium
No
No
 687.689.v1a_f775332fc9 29.07.2025 SB2025072944
#VU59582 - Permissions, Privileges, and Access Controls
CVE-2022-20616		 CWE-264 Low
No
No
 1.27.1 13.01.2022 SB2022011310
#VU27608 - Insufficiently Protected Credentials
CVE-2020-2182		 CWE-522 Low
No
No
 1.23 07.05.2020 SB2020050720
SB2020090880
SB2020102066
#VU27607 - Insufficiently Protected Credentials
CVE-2020-2181		 CWE-522 Medium
No
No
 1.23 07.05.2020 SB2020050720
SB2020090880
SB2020102066
#VU35697 - Credentials Management
CVE-2019-1010241		 CWE-255 Medium
No
No
 - 19.07.2019 SB2019071911