Known vulnerabilities in SAML
Vendor:
Jenkins
Software:
SAML
Software CPE:
cpe:2.3:a:jenkins:saml:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
4.623.v7875d61cd9f5
4.618.v441a_27fa_46d2
4.623
4.618
4.605
4.600
4.595
4.583.585.v22ccc1139f55
4.583.vc68232f7018a_
4.590
4.583.585
4.583
4.582
4.580
4.569
4.568
4.544
4.525
4.519
4.514
4.511
4.501
4.496
4.487
4.485
4.464
4.429
4.418
4.403
4.385
4.372
4.369
4.367
4.365
4.364
4.363
4.361
4.354
4.352
3.343
2.333
2.298
2.297
2.296
2.295
2.291
2.1.1
2.1.0
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.3.1
2.0.3
2.0.2
2.0.1
2.0.0
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.14
0.13
0.12
0.11
0.10
0.9
0.8
0.7
0.6
0.5
0.4
0.3
0.2
0.1
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147212 - Improper Access Control CVE-2026-84668 |
CWE-284 | Medium | 4.623.v7875d61cd9f5 | 07.09.2026 |
SB2026090718 |
||
| #VU117805 - Authentication Bypass by Capture-replay CVE-2025-64131 |
CWE-294 | High | 4.583.585.v22ccc1139f55 | 30.10.2025 |
SB2025103017 |
||
| #VU56228 - Cross-Site Request Forgery (CSRF) CVE-2021-21678 |
CWE-352 | Low | 2.0.8 | 01.09.2021 |
SB2021090105 |