Known vulnerabilities in Jenkins LTS - page 5

Vendor: Jenkins
Software: Jenkins LTS
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins LTS Jenkins LTS is affected by 129 known vulnerabilities: 18 high, 60 medium, 51 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57990 - Missing Authorization
CVE-2021-21697
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57989 - Protection Mechanism Failure
CVE-2021-21696
CWE-693 Medium
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57988 - Missing Authorization
CVE-2021-21695
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57987 - Permissions, Privileges, and Access Controls
CVE-2021-21694
CWE-264 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57986 - Improper Authorization
CVE-2021-21693
CWE-285 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57985 - Missing Authorization
CVE-2021-21692
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57984 - Missing Authorization
CVE-2021-21691
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57983 - Protection Mechanism Failure
CVE-2021-21690
CWE-693 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57982 - Missing Authorization
CVE-2021-21689
CWE-862 High
No
No
2.303.3 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577
CWE-295 Low
No
No
2.303.2 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU57148 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21683
CWE-22 Medium
No
No
2.303.2 08.10.2021 SB2021100807
#VU57147 - Path Equivalence
CVE-2021-21682
CWE-42 Medium
No
No
2.303.2 08.10.2021 SB2021100807
#VU54492 - Session Fixation
CVE-2021-21671
CWE-384 Medium
No
No
2.289.2 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU54491 - Permissions, Privileges, and Access Controls
CVE-2021-21670
CWE-264 Low
No
No
2.289.2 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU51994 - Improper Authentication
CVE-2021-21640
CWE-287 Low
No
No
2.277.2 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51993 - Improper input validation
CVE-2021-21639
CWE-20 Low
No
No
2.277.2 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
2.277.3 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615
CWE-367 Medium
No
No
2.263.3 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608
CWE-79 Low
No
No
2.263.2 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609
CWE-264 Low
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more


Showing elements 81 - 100 out of 129