Known vulnerabilities in jenkins-2-plugins (Red Hat package) - page 11

Software CPE: cpe:2.3:o:red_hat:jenkins-2-plugins_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 232
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jenkins-2-plugins (Red Hat package) jenkins-2-plugins (Red Hat package) is affected by 232 known vulnerabilities: 30 high, 125 medium, 77 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615
CWE-367 Medium
No
No
4.6.1612257979-1.el8 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU48231 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2304
CWE-611 Medium
No
No
4.4.1611203637-1.el7 04.11.2020 SB2020110942
SB2021020406
#VU48232 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2305
CWE-611 Medium
No
No
4.4.1611203637-1.el7 04.11.2020 SB2020110943
SB2021020406
#VU46877 - Improper Certificate Validation
CVE-2020-2252
CWE-295 Medium
No
No
3.11.1603460090-1.el7 16.09.2020 SB2020092110
SB2020111704
#VU46880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-2254
CWE-22 Low
No
No
3.11.1603460090-1.el7 16.09.2020 SB2020092202
SB2020111704
#VU46881 - Permissions, Privileges, and Access Controls
CVE-2020-2255
CWE-264 Low
No
No
3.11.1603460090-1.el7 16.09.2020 SB2020092202
SB2020111704
#VU30132 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2226
CWE-79 Low
No
No
4.4.1598545590-1.el7, 4.5.1596698303-1.el7 16.07.2020 SB20200716114
SB2020081913
SB2020090880
and 1 more
#VU30131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2225
CWE-79 Low
No
No
4.4.1598545590-1.el7, 4.5.1596698303-1.el7 16.07.2020 SB20200716113
SB2020081913
SB2020090880
and 1 more
#VU30130 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2224
CWE-79 Low
No
No
4.4.1598545590-1.el7, 4.5.1596698303-1.el7 16.07.2020 SB20200716113
SB2020081913
SB2020090880
and 1 more
#VU28793 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-13757
CWE-327 Medium
No
No
4.5.1596698303-1.el7 08.06.2020 SB2020060820
SB2020081913
SB2020090110
and 11 more
#VU28570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2190
CWE-79 Low
No
No
4.4.1598545590-1.el7, 4.5.1595405982-1.el7 04.06.2020 SB2020060411
SB2020080319
SB2020090880
#VU27608 - Insufficiently Protected Credentials
CVE-2020-2182
CWE-522 Low
No
No
4.4.1598545590-1.el7 07.05.2020 SB2020050720
SB2020090880
SB2020102066
#VU27607 - Insufficiently Protected Credentials
CVE-2020-2181
CWE-522 Medium
No
No
4.4.1598545590-1.el7 07.05.2020 SB2020050720
SB2020090880
SB2020102066
#VU26006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2136
CWE-79 Low
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 11.03.2020 SB2020031129
SB2020063006
SB2020061842
and 1 more
#VU26005 - Permissions, Privileges, and Access Controls
CVE-2020-2135
CWE-264 High
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU26004 - Permissions, Privileges, and Access Controls
CVE-2020-2134
CWE-264 High
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 11.03.2020 SB2020031128
SB2020063006
SB2020061842
and 1 more
#VU25281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2111
CWE-79 Low
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 13.02.2020 SB2020021304
SB2020063006
SB2020061842
and 1 more
#VU25280 - Permissions, Privileges, and Access Controls
CVE-2020-2110
CWE-264 High
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 13.02.2020 SB2020021303
SB2020063006
SB2020061842
and 1 more
#VU25279 - Permissions, Privileges, and Access Controls
CVE-2020-2109
CWE-264 High
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 13.02.2020 SB2020021302
SB2020063006
SB2020061842
and 1 more
#VU22916 - Improper Access Control
CVE-2019-16538
CWE-284 High
No
No
3.11.1591354111-1.el7, 4.3.1597915133-1.el7, 4.4.1592817009-1.el7 22.11.2019 SB2019112205
SB2020063006
SB2020061842
and 1 more


Showing elements 201 - 220 out of 232