Known vulnerabilities in Repository Connector

Vendor: Jenkins
Software: Repository Connector
Software CPE: cpe:2.3:a:jenkins:repository-connector:*:*:*:*:*:jenkins:*:*
Website: https://jenkins.io/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Repository Connector Repository Connector is affected by 6 known vulnerabilities: 2 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65916 - Missing Authorization
CVE-2022-36904		 CWE-862 Medium
No
No
 - 02.08.2022 SB2022080209
#VU65914 - Missing Authorization
CVE-2022-36903		 CWE-862 Medium
No
No
 - 02.08.2022 SB2022080209
#VU64641 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34195		 CWE-79 Low
No
No
 - 24.06.2022 SB2022062408
#VU50946 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21618		 CWE-79 Low
No
No
 2.0.3 25.02.2021 SB2021022523
#VU26035 - Cleartext Transmission of Sensitive Information
CVE-2020-2149		 CWE-319 Low
No
No
 - 12.03.2020 SB2020031217
#VU17914 - Cleartext Storage of Sensitive Information
 CWE-312 Low
No
No
 1.2.5 07.03.2019 SB2019030712