Known vulnerabilities in Email Extension

Vendor: Jenkins
Software CPE: cpe:2.3:a:jenkins:email-ext:*:*:*:*:*:jenkins:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Email Extension Email Extension is affected by 9 known vulnerabilities: 3 medium, 6 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132682 - External Control of File Name or Path
CVE-2026-48920
CWE-73 Medium
No
No
1933.1935.v276319e3cc47 28.05.2026 SB20260528280
#VU76234 - Cross-Site Request Forgery (CSRF)
CVE-2023-32980
CWE-352 Low
No
No
2.96.1 17.05.2023 SB2023051750
SB2023062636
#VU76232 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32979
CWE-200 Low
No
No
2.96.1 17.05.2023 SB2023051750
SB2023062636
#VU72441 - Protection Mechanism Failure
CVE-2023-25765
CWE-693 Medium
No
No
2.93.1 21.02.2023 SB2023022121
#VU72440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25764
CWE-79 Low
No
No
2.93.1 21.02.2023 SB2023022121
#VU72439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25763
CWE-79 Low
No
No
2.93.1 21.02.2023 SB2023022121
#VU46879 - Improper Certificate Validation
CVE-2020-2253
CWE-295 Medium
No
No
2.76 16.09.2020 SB2020092201
#VU45664 - Cleartext Storage of Sensitive Information
CVE-2020-2232
CWE-312 Low
No
No
2.74 13.08.2020 SB2020081305
#VU17916 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
2.65 07.03.2019 SB2019030710