Known vulnerabilities in Jenkins LTS - page 6

Vendor: Jenkins
Software: Jenkins LTS
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins LTS Jenkins LTS is affected by 129 known vulnerabilities: 18 high, 60 medium, 51 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611
CWE-79 Low
No
No
2.263.2 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610
CWE-79 Low
No
No
2.263.2 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603
CWE-79 Low
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604
CWE-91 Medium
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602
CWE-200 Medium
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605
CWE-22 Medium
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606
CWE-264 Low
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607
CWE-119 Medium
No
No
2.263.2 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU45663 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2231
CWE-79 Low
Available
No
2.235.4 13.08.2020 SB2020081304
SB2020100118
SB2020102224
#VU45662 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2230
CWE-79 Low
Available
No
2.235.4 13.08.2020 SB2020081304
SB2020100118
SB2020102224
#VU45661 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2229
CWE-79 Low
Available
No
2.235.4 13.08.2020 SB2020081304
SB2020100118
SB2020102224
#VU30129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2223
CWE-79 Low
No
No
2.235.2 16.07.2020 SB20200716112
SB2020082409
SB2020071911
and 2 more
#VU30128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2222
CWE-79 Low
No
No
2.235.2 16.07.2020 SB20200716112
SB2020082409
SB2020071910
and 2 more
#VU30127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2221
CWE-79 Low
No
No
2.235.2 16.07.2020 SB20200716112
SB2020082409
SB2020071909
and 2 more
#VU30126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2220
CWE-79 Low
No
No
2.235.2 16.07.2020 SB20200716112
SB2020082409
SB2020071908
and 2 more
#VU34161 - Operation on a Resource after Expiration or Release
CVE-2019-17638
CWE-672 High
No
No
2.235.5 09.07.2020 SB2020070939
SB2020081709
SB2020102107
and 11 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163
CWE-79 Low
No
No
2.204.6, 2.222.1 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162
CWE-79 Low
No
No
2.204.6, 2.222.1 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2161
CWE-79 Low
No
No
2.204.6, 2.222.1 26.03.2020 SB2020032622
SB2020032662
SB2020061738
and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF)
CVE-2020-2160
CWE-352 Low
No
No
2.204.6, 2.222.1 26.03.2020 SB2020032622
SB2020032661
SB2020061738
and 1 more


Showing elements 101 - 120 out of 129