Known vulnerabilities in Credentials Binding
Vendor:
Jenkins
Software:
Credentials Binding
Software CPE:
cpe:2.3:a:jenkins:credentials_binding:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
728
725.ve52b_2328a_fde
725
720.v3f6decef43ea_
719.v80e905ef14eb_
720
719
717
687.689.v1a_f775332fc9
687.v619cb_15e923f
702
696
687.689
687
681
679
677
657
642
636
631
626
621
604
523.525
523
1.27.1
1.24.1
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20.1
1.20
1.19
1.18
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132684 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-48922 |
CWE-22 | Medium | 725.ve52b_2328a_fde | 28.05.2026 |
SB20260528282 |
||
| #VU129238 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-42520 |
CWE-22 | Medium | 720.v3f6decef43ea_ | 04.05.2026 |
SB2026050407 |
||
| #VU113400 - Insufficiently Protected Credentials CVE-2025-53650 |
CWE-522 | Medium | 687.689.v1a_f775332fc9 | 29.07.2025 |
SB2025072944 |
||
| #VU59582 - Permissions, Privileges, and Access Controls CVE-2022-20616 |
CWE-264 | Low | 1.27.1 | 13.01.2022 |
SB2022011310 |
||
| #VU27608 - Insufficiently Protected Credentials CVE-2020-2182 |
CWE-522 | Low | 1.23 | 07.05.2020 |
SB2020050720 SB2020090880 SB2020102066 |
||
| #VU27607 - Insufficiently Protected Credentials CVE-2020-2181 |
CWE-522 | Medium | 1.23 | 07.05.2020 |
SB2020050720 SB2020090880 SB2020102066 |
||
| #VU35697 - Credentials Management CVE-2019-1010241 |
CWE-255 | Medium | - | 19.07.2019 | - |