Known vulnerabilities in Pipeline: Shared Groovy Libraries 552.vd9cc05b8a2e1

Vendor: Jenkins
Software: Pipeline: Shared Groovy Libraries
Version: 552.vd9cc05b8a2e1
Software CPE: cpe:2.3:a:jenkins:pipeline_shared_groovy_libraries:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Pipeline: Shared Groovy Libraries version 552.vd9cc05b8a2e1 Pipeline: Shared Groovy Libraries 552.vd9cc05b8a2e1 is affected by 6 vulnerabilities: 6 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60641 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25183		 CWE-94 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25182		 CWE-94 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60639 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25181		 CWE-94 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60638 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25178		 CWE-61 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60637 - UNIX Symbolic Link (Symlink) Following
CVE-2022-25177		 CWE-61 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25174		 CWE-78 Medium
No
No
 561.va_ce0de3c2d69 16.02.2022 SB2022021607
SB2022032826
SB2022032910
and 4 more