Known vulnerabilities in iceScrum

Vendor: Jenkins
Software: iceScrum
Software CPE: cpe:2.3:a:jenkins:icescrum:*:*:*:*:*:jenkins:*:*
Website: https://jenkins.io/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iceScrum iceScrum is affected by 4 known vulnerabilities: 1 medium, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87309 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28160		 CWE-79 Low
No
No
 - 08.03.2024 SB2024030839
#VU22047 - Server-Side Request Forgery (SSRF)
CVE-2019-10442		 CWE-918 Medium
No
No
 1.1.6 22.10.2019 SB2019102212
#VU22030 - Cleartext Storage of Sensitive Information
CVE-2019-10443		 CWE-312 Low
No
No
 1.1.6 22.10.2019 SB2019102212
#VU22029 - Cross-Site Request Forgery (CSRF)
CVE-2019-10441		 CWE-352 Low
No
No
 1.1.6 22.10.2019 SB2019102212