Known vulnerabilities in Jenkins LTS - page 4

Vendor: Jenkins
Software: Jenkins LTS
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins LTS Jenkins LTS is affected by 129 known vulnerabilities: 18 high, 60 medium, 51 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77481 - Cross-Site Request Forgery (CSRF)
CVE-2023-35141
CWE-352 Low
No
No
2.401.1 16.06.2023 SB2023061626
#VU73197 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27904
CWE-200 Low
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023041270
SB2023041272
and 10 more
#VU73196 - Incorrect Default Permissions
CVE-2023-27903
CWE-276 Low
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023041270
SB2023041272
and 9 more
#VU73195 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-27902
CWE-22 Medium
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023052528
#VU73194 - Allocation of Resources Without Limits or Throttling
CVE-2023-27901
CWE-770 Medium
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023052528
SB2023071962
and 2 more
#VU73193 - Allocation of Resources Without Limits or Throttling
CVE-2023-27900
CWE-770 Medium
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023052528
#VU73188 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-27899
CWE-94 Medium
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023041270
SB2023041272
and 2 more
#VU73187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-27898
CWE-79 Low
No
No
2.375.4, 2.387.1 09.03.2023 SB2023030922
SB2023041270
SB2023041272
and 2 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
2.375.4, 2.387.1 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU65830 - Resource Management Errors
CVE-2022-2048
CWE-399 Medium
No
No
2.361.1 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU64604 - Observable discrepancy
CVE-2022-34174
CWE-203 Medium
No
No
2.332.4 23.06.2022 SB2022062312
SB2023011328
SB2023021602
and 5 more
#VU64600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34171
CWE-79 Low
No
No
2.332.4, 2.346.1 23.06.2022 SB2022062312
#VU64599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34170
CWE-79 Low
No
No
2.332.4, 2.346.1 23.06.2022 SB2022062312
#VU60528 - Resource exhaustion
CVE-2022-0538
CWE-400 Medium
No
No
2.319.3 11.02.2022 SB2022021103
#VU60527 - Resource exhaustion
CVE-2021-43859
CWE-400 Medium
No
No
2.319.3 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU59576 - Cross-Site Request Forgery (CSRF)
CVE-2022-20612
CWE-352 Low
No
No
2.319.2 13.01.2022 SB2022011305
SB2022021019
SB2022021637
and 6 more
#VU57981 - Missing Authorization
CVE-2021-21688
CWE-862 Medium
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57980 - Missing Authorization
CVE-2021-21687
CWE-862 Medium
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21686
CWE-22 Medium
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57978 - Missing Authorization
CVE-2021-21685
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more


Showing elements 61 - 80 out of 129