Known vulnerabilities in SAML Single Sign On(SSO)

Vendor: Jenkins
Software: SAML Single Sign On(SSO)
Software CPE: cpe:2.3:a:jenkins:saml_single_sign_on_sso:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAML Single Sign On(SSO) SAML Single Sign On(SSO) is affected by 7 known vulnerabilities: 3 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78256 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37945		 CWE-200 Low
No
No
 2.3.1 14.07.2023 SB2023071417
#VU76257 - Improper Access Control
CVE-2023-32996		 CWE-284 Low
No
No
 2.0.1 17.05.2023 SB2023051771
#VU76253 - Cross-Site Request Forgery (CSRF)
CVE-2023-32995		 CWE-352 Low
No
No
 2.0.1 17.05.2023 SB2023051771
#VU76252 - Improper Certificate Validation
CVE-2023-32994		 CWE-295 Medium
No
No
 2.2.0 17.05.2023 SB2023051770
#VU76251 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-32993		 CWE-300 Medium
No
No
 2.1.0 17.05.2023 SB2023051769
#VU76250 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-32992		 CWE-611 Medium
No
No
 2.1.0 17.05.2023 SB2023051769
#VU76249 - Cross-Site Request Forgery (CSRF)
CVE-2023-32991		 CWE-352 Low
No
No
 2.1.0 17.05.2023 SB2023051769