Known vulnerabilities in SonarQube Scanner 2.18.3
Vendor:
Jenkins
Software:
SonarQube Scanner
Version:
2.18.3
Software CPE:
cpe:2.3:a:jenkins:sonarqube_scanner:*:*:*:*:*:*:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Vulnerabilities by Severity
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-84665 |
CWE-79 | Low | 2.19.0 | 07.09.2026 |
SB2026090706 |