Known vulnerabilities in Pipeline: Shared Groovy Libraries

Known vulnerabilities in Pipeline: Shared Groovy Libraries

Vendor: Jenkins

Software: Pipeline: Shared Groovy Libraries

Software CPE: cpe:2.3:a:jenkins:pipeline_shared_groovy_libraries:*:*:*:*:*:*:*:*

Website: https://jenkins.io/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68598 - Protection Mechanism Failure CVE-2022-43405	CWE-693	Medium	No	No	613.v9c41a_160233f	24.10.2022	SB2022102422 SB2023020889 SB2023022307 and 4 more
#VU62305 - Improper Access Control CVE-2022-29047	CWE-284	Medium	No	No	2.21.3, 566.vd0a_a_3334a_555	13.04.2022	SB2022041334 SB2022061218 SB2023011328 and 2 more
#VU60641 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25183	CWE-94	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25182	CWE-94	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60639 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25181	CWE-94	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60638 - UNIX Symbolic Link (Symlink) Following CVE-2022-25178	CWE-61	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60637 - UNIX Symbolic Link (Symlink) Following CVE-2022-25177	CWE-61	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25174	CWE-78	Medium	No	No	561.va_ce0de3c2d69	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more