Known vulnerabilities in Job Configuration History

Vendor: Jenkins
Software: Job Configuration History
Software CPE: cpe:2.3:a:jenkins:job_configuration_history:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Job Configuration History Job Configuration History is affected by 7 known vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135727 - Cleartext Storage of Sensitive Information
CVE-2026-57287		 CWE-312 Medium
No
No
 1367.vc8fa_b_15101dc 29.06.2026 SB2026062952
#VU80527 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-41933		 CWE-611 Medium
No
No
 1229.v3039470161a_d 07.09.2023 SB2023090735
#VU80526 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41932		 CWE-22 Medium
No
No
 1229.v3039470161a_d 07.09.2023 SB2023090735
#VU80525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41931		 CWE-79 Low
No
No
 1229.v3039470161a_d 07.09.2023 SB2023090735
#VU80524 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41930		 CWE-22 Medium
No
No
 1229.v3039470161a_d 07.09.2023 SB2023090735
#VU66743 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38664		 CWE-79 Low
No
No
 1166.vc9f255f45b_8a 24.08.2022 SB2022082413
#VU65853 - Cross-Site Request Forgery (CSRF)
CVE-2022-36887		 CWE-352 Low
No
No
 1156.v536a_97b_8d649 28.07.2022 SB2022072822