Known vulnerabilities in Fortify
Vendor:
Jenkins
Software:
Fortify
Software CPE:
cpe:2.3:a:jenkins:fortify:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU79894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-4303 |
CWE-79 | Low | 22.2.39 | 23.08.2023 |
SB2023082328 |
||
| #VU79893 - Improper Access Control CVE-2023-4302 |
CWE-284 | Low | 22.2.39 | 23.08.2023 |
SB2023082328 |
||
| #VU79892 - Cross-Site Request Forgery (CSRF) CVE-2023-4301 |
CWE-352 | Low | 22.2.39 | 23.08.2023 |
SB2023082328 |
||
| #VU60649 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-25188 |
CWE-22 | Low | 20.2.35 | 16.02.2022 |
SB2022021614 |
||
| #VU24766 - Cleartext Storage of Sensitive Information CVE-2020-2107 |
CWE-312 | Low | 19.2.30 | 30.01.2020 |
SB2020013007 |