Known vulnerabilities in NeuVector Vulnerability Scanner

Vendor: Jenkins
Software: NeuVector Vulnerability Scanner
Software CPE: cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:*:*:*:*:*:jenkins:*:*
Website: https://jenkins.io/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NeuVector Vulnerability Scanner NeuVector Vulnerability Scanner is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83593 - Improper Access Control
CVE-2023-49674		 CWE-284 Low
No
No
 2.2 30.11.2023 SB2023113035
#VU83591 - Cross-Site Request Forgery (CSRF)
CVE-2023-49673		 CWE-352 Low
No
No
 2.2 30.11.2023 SB2023113035
#VU75070 - Improper Certificate Validation
CVE-2023-30517		 CWE-295 Medium
No
No
 - 13.04.2023 SB2023041324
#VU68592 - Protection Mechanism Failure
CVE-2022-43434		 CWE-693 Medium
No
No
 - 24.10.2022 SB2022102408
#VU21363 - Cleartext Storage of Sensitive Information
CVE-2019-10430		 CWE-312 Low
No
No
 1.6 26.09.2019 SB2019092605