Known vulnerabilities in NS-ND Integration Performance Publisher

Vendor: Jenkins
Software: NS-ND Integration Performance Publisher
Software CPE: cpe:2.3:a:jenkins:ns-nd_integration_performance_publisher:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NS-ND Integration Performance Publisher NS-ND Integration Performance Publisher is affected by 8 known vulnerabilities: 2 medium, 6 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76300 - Unprotected Storage of Credentials
CVE-2023-33000		 CWE-256 Low
No
No
 4.11.0.48 18.05.2023 SB2023051848
#VU69381 - Improper Certificate Validation
CVE-2022-38666		 CWE-295 Medium
No
No
 - 16.11.2022 SB2022111634
#VU69380 - Unprotected Storage of Credentials
CVE-2022-45392		 CWE-256 Low
No
No
 4.8.0.146 16.11.2022 SB2022111633
#VU69379 - Improper Certificate Validation
CVE-2022-45391		 CWE-295 Medium
No
No
 4.8.0.146 16.11.2022 SB2022111633
#VU67571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41229		 CWE-79 Low
No
No
 - 22.09.2022 SB2022092213
#VU67570 - Improper Access Control
CVE-2022-41228		 CWE-284 Low
No
No
 4.8.0.130 22.09.2022 SB2022092212
#VU67569 - Cross-Site Request Forgery (CSRF)
CVE-2022-41227		 CWE-352 Low
No
No
 4.8.0.130 22.09.2022 SB2022092212
#VU64625 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34191		 CWE-79 Low
No
No
 - 23.06.2022 SB2022062335