Known vulnerabilities in Script Security

Vendor: Jenkins
Software CPE: cpe:2.3:a:jenkins:script-security:*:*:*:*:*:jenkins:*:*
Total vulnerabilities: 30
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Script Security Script Security is affected by 30 known vulnerabilities: 10 high, 16 medium, 4 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135695 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-57281
CWE-93 Medium
No
No
1402.1405.vc96e74964250 29.06.2026 SB2026062905
#VU135662 - Protection Mechanism Failure
CVE-2026-57280
CWE-693 Medium
No
No
1402.1405.vc96e74964250 29.06.2026 SB2026062905
#VU129237 - Missing Authorization
CVE-2026-42519
CWE-862 Medium
No
No
1402.v94c9ce464861 04.05.2026 SB2026050406
#VU100585 - Permissions, Privileges, and Access Controls
CVE-2024-52549
CWE-264 Low
No
No
1368.vb_b_402e3547e7 18.11.2024 SB2024111821
#VU89154 - Security Features
CVE-2024-34145
CWE-254 Medium
No
No
1336.vf33a_a_9863911 06.05.2024 SB2024050613
SB20240611153
SB20240611154
and 1 more
#VU89153 - Security Features
CVE-2024-34144
CWE-254 Medium
No
No
1336.vf33a_a_9863911 06.05.2024 SB2024050613
SB20240611153
SB20240611154
and 2 more
#VU71499 - Permissions, Privileges, and Access Controls
CVE-2023-24422
CWE-264 Medium
No
No
1229.v4880b_b_e905a_6 25.01.2023 SB2023012504
SB2023041270
SB2023041272
and 14 more
#VU69368 -
CVE-2022-45379
Medium
No
No
1190.v65867a_a_47126 16.11.2022 SB2022111616
SB2023020889
SB2023022307
and 3 more
#VU68597 - Protection Mechanism Failure
CVE-2022-43403
CWE-693 Medium
No
No
1184.v85d16b_d851b_3 24.10.2022 SB2022102420
SB2023011761
SB2023020889
and 4 more
#VU68595 - Protection Mechanism Failure
CVE-2022-43404
CWE-693 Medium
No
No
1184.v85d16b_d851b_3 24.10.2022 SB2022102420
SB2023020889
SB2023022307
and 3 more
#VU68594 - Protection Mechanism Failure
CVE-2022-43401
CWE-693 Medium
No
No
1184.v85d16b_d851b_3 24.10.2022 SB2022102420
SB2023020889
SB2023022307
and 4 more
#VU63359 - Cross-Site Request Forgery (CSRF)
CVE-2022-30946
CWE-352 Low
No
No
1172.v35f6a_0b_8207e 18.05.2022 SB2022051808
SB2023011328
SB2023020889
and 4 more
#VU47187 - Permissions, Privileges, and Access Controls
CVE-2020-2279
CWE-264 Medium
No
No
1.75 23.09.2020 SB2020093082
#VU28570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2190
CWE-79 Low
No
No
1.73 04.06.2020 SB2020060411
SB2020080319
SB2020090880
#VU26005 - Permissions, Privileges, and Access Controls
CVE-2020-2135
CWE-264 High
No
No
1.71 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU26004 - Permissions, Privileges, and Access Controls
CVE-2020-2134
CWE-264 High
No
No
1.71 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU25280 - Permissions, Privileges, and Access Controls
CVE-2020-2110
CWE-264 High
No
No
1.70 13.02.2020 SB2020021303
SB2020063006
SB2020061842
and 1 more
#VU22916 - Improper Access Control
CVE-2019-16538
CWE-284 High
No
No
1.68 22.11.2019 SB2019112205
SB2020063006
SB2020061842
and 1 more
#VU21522 - Permissions, Privileges, and Access Controls
CVE-2019-10431
CWE-264 High
No
No
1.65 03.10.2019 SB2019100704
SB2019121117
SB2019121612
and 1 more
#VU21119 - Permissions, Privileges, and Access Controls
CVE-2019-10393
CWE-264 Medium
No
No
1.63 16.09.2019 SB2019091602


Showing elements 1 - 20 out of 30