Known vulnerabilities in Embeddable Build Status
Vendor:
Jenkins
Software:
Embeddable Build Status
Software CPE:
cpe:2.3:a:jenkins:embeddable_build_status:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64611 - Improper Authorization CVE-2022-34180 |
CWE-285 | Medium | 2.0.4 | 23.06.2022 |
SB2022062321 |
||
| #VU64610 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-34179 |
CWE-22 | Medium | 2.0.4 | 23.06.2022 |
SB2022062321 |
||
| #VU64609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-34178 |
CWE-79 | Low | 2.0.4 | 23.06.2022 |
SB2022062321 |