Known vulnerabilities in jenkins-2-plugins (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jenkins-2-plugins (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jenkins-2-plugins_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
232
Public exploits:
16
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
4.14.1758302383-1.el8
4.15.1758303157-1.el8
4.13.1758299004-1.el8
4.12.1758299735-1.el8
4.16.1758337173-1.el9
4.17.1758260106-1.el9
4.18.1758260849-1.el9
4.19.1758207171-1.el9
4.15.1756735456-1.el8
4.14.1757087858-1.el8
4.13.1756901992-1.el8
4.17.1756732064-1.el9
4.12.1756902839-1.el8
4.19.1756901647-1.el9
4.16.1756734507-1.el9
4.18.1756731677-1.el9
4.15.1750856638-1.el8
4.16.1750857315-1.el9
4.17.1750851950-1.el9
4.14.1750903529-1.el8
4.13.1750916671-1.el8
4.12.1750933270-1.el8
4.18.1750846854-1.el9
4.13.1729840148-1.el8
4.12.1730119231-1.el8
4.14.1729839844-1.el8
4.15.1729838165-1.el8
4.13.1716445207-1.el8
4.12.1716445211-1.el8
4.14.1716388016-1.el8
4.12.1706515741-1.el8
4.14.1706516441-1.el8
4.13.1706516346-1.el8
4.11.1706516946-1.el8
4.11.1698299029-1.el8
4.12.1698294000-1.el8
4.13.1698292274-1.el8
4.10.1687341544-1.el8
4.10.1685679861-1.el8
4.11.1686831822-1.el8
4.12.1686649756-1.el8
4.13.1686680473-1.el8
4.10.1684982411-1.el8
4.13.1684911916-1.el8
4.12.1683009955-1.el8
4.11.1683009941-1.el8
4.10.1681719745-1.el8
4.10.1680703106-1.el8
4.9.1680069756-1.el8
4.10.1675936179-1.el8
4.12.1675702407-1.el8
4.9.1675668922-1.el8
4.10.1675407676-1.el8
4.9.1674644684-1.el8
4.10.1675144701-1.el8
4.9.1651754460-1.el8
4.7.1648800585-1.el8
4.7.1616671397-1.el8
3.11.1612862361-1.el7
4.7.1611636915-1.el8
4.5.1610108899-1.el7
4.6.1601368321-1.el8
4.3.1601981312-1.el7
4.3.1593080425-1.el7
4.3.1597915133-1.el7
3.11.1597310986-1.el7
3.11.1591354111-1.el7
4.8.1672842762-1.el8
4.9.1669894222-1.el8
4.10.1670851835-1.el8
4.9.1667460322-1.el8
4.10.1667388055-1.el8
4.10.1663147786-1.el8
4.6.1653312933-1.el8
4.7.1652967082-1.el8
3.11.1650628887-1.el7
4.6.1650364520-1.el8
4.10.1650890594-1.el8
3.11.1650371376-1.el7
4.9.1647580879-1.el8
4.10.1647505461-1.el8
4.8.1646993358-1.el8
4.10.1643404185-1.el8
4.6.1643965689-1.el8
3.11.1644412543-1.el7
4.9.1644822177-1.el8
4.8.1643649345-1.el8
4.7.1643883495-1.el8
4.9.1643389956-1.el8
4.6.1637602169-1.el8
3.11.1637699107-1.el7
4.7.1637600997-1.el8
4.8.1637599935-1.el8
4.9.1637598812-1.el8
4.8.1633555500-1.el8
4.9.1630555871-1.el8
4.6.1629443573-1.el8
4.8.1624022417-1.el8
4.5.1623326336-1.el7
3.11.1624366838-1.el7
4.6.1623162648-1.el8
4.7.1621361158-1.el8
4.6.1612257979-1.el8
4.4.1611203637-1.el7
4.6.1608634578-1.el7
4.6.1609853716-1.el8
3.11.1603460090-1.el7
3.11.1593081747-1.el7
4.4.1598545590-1.el7
4.5.1596698303-1.el7
4.5.1595405982-1.el7
4.4.1592817009-1.el7
3.11.1585050035-1.el7
4.3.1583445947-1.el7
4.3.1581956184-1.el7
4.3.1574944219-1.el7
4.2.1583446990-1.el7
4.2.1581952573-1.el7
4.2.1574873592-1.el7
4.2.1568997376-1.el7
4.1.1583850385-1.el7
4.1.1574872364-1.el7
4.1.1572877452-1.el7
4.1.1571057286-1.el7
4.1.1567784275-1.el7
4.1.1567707934-1.el7
4.1.1561471763-1.el7
4.1.1556549703-1.el7
3.11.1583723786-1.el7
3.11.1579107288-1.el7
3.11.1577428005-1.el7
3.11.1575261255-1.el7
3.11.1568994366-1.el7
3.11.1567698330-1.el7
3.11.1566492396-1.el7
3.11.1560870549-1.el7
3.11.1559667994-1.el7
3.11.1553788831-1.el7
3.11.1552336312-1.el7
3.11.1549642489-1.el7
3.11.1542061886-1.el7
3.11.1539805268-1.el7
3.11.1535566135-1.el7
3.10.1525788236-1.el7
3.9.1519779801-1.el7
3.7.1527795978-1.el7
3.7.1510081324-1.el7
3.7.1502412812-1.el7
Vulnerabilities (232)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85790 - Missing Origin Validation in WebSockets CVE-2024-23898 |
CWE-1385 | High | 4.11.1706516946-1.el8, 4.12.1706515741-1.el8, 4.13.1706516346-1.el8 | 25.01.2024 |
SB2024012513 SB2024021214 SB2024021215 and 1 more |
||
| #VU85786 - Improper Access Control CVE-2024-23897 |
CWE-284 | High | 4.11.1706516946-1.el8, 4.12.1706515741-1.el8, 4.13.1706516346-1.el8 | 25.01.2024 |
SB2024012513 SB2024021214 SB2024021215 and 6 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 4.12.1706515741-1.el8 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU79888 - Exposure of sensitive information to an unauthorized actor CVE-2023-40339 |
CWE-200 | Low | 4.12.1706515741-1.el8, 4.14.1706516441-1.el8 | 23.08.2023 |
SB2023082323 SB2023112014 SB2024021216 and 1 more |
||
| #VU79886 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-40338 |
CWE-22 | Low | 4.12.1706515741-1.el8, 4.14.1706516441-1.el8 | 23.08.2023 |
SB2023082322 SB2023112014 SB2024021216 and 1 more |
||
| #VU79885 - Cross-Site Request Forgery (CSRF) CVE-2023-40337 |
CWE-352 | Low | 4.12.1706515741-1.el8, 4.14.1706516441-1.el8 | 23.08.2023 |
SB2023082322 SB2023112014 SB2024021216 and 1 more |
||
| #VU78258 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-37947 |
CWE-601 | Low | 4.12.1706515741-1.el8, 4.14.1706516441-1.el8 | 14.07.2023 |
SB2023071418 SB2024021216 SB2024021217 |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 4.12.1706515741-1.el8, 4.14.1706516441-1.el8 | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
||
| #VU75562 - Improper input validation CVE-2023-20861 |
CWE-20 | Medium | 4.12.1686649756-1.el8, 4.12.1706515741-1.el8, 4.13.1686680473-1.el8 | 27.04.2023 |
SB2023042742 SB2023042746 SB2023042832 and 61 more |
||
| #VU75408 - Security Features CVE-2023-20862 |
CWE-254 | Medium | 4.12.1706515741-1.el8 | 21.04.2023 |
SB2023042130 SB2023042132 SB2023053121 and 20 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 4.12.1706515741-1.el8 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 4.12.1706515741-1.el8 | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
||
| #VU72438 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-25762 |
CWE-79 | Low | 4.10.1681719745-1.el8, 4.11.1683009941-1.el8, 4.11.1698299029-1.el8, 4.11.1706516946-1.el8, 4.12.1683009955-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1684911916-1.el8, 4.13.1698292274-1.el8, 4.13.1706516346-1.el8, 4.14.1706516441-1.el8 | 21.02.2023 |
SB2023022118 SB2023042646 SB2023051806 and 9 more |
||
| #VU72437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-25761 |
CWE-79 | Low | 4.10.1681719745-1.el8, 4.11.1683009941-1.el8, 4.11.1698299029-1.el8, 4.11.1706516946-1.el8, 4.12.1683009955-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1684911916-1.el8, 4.13.1698292274-1.el8, 4.13.1706516346-1.el8, 4.14.1706516441-1.el8 | 21.02.2023 |
SB2023022116 SB2023042646 SB2023051806 and 9 more |
||
| #VU72076 - Incorrect Authorization CVE-2020-7692 |
CWE-863 | High | 4.9.1675668922-1.el8, 4.10.1675144701-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1684911916-1.el8 | 08.02.2023 |
SB2020070955 SB2023020889 SB2023022307 and 9 more |
||
| #VU71499 - Permissions, Privileges, and Access Controls CVE-2023-24422 |
CWE-264 | Medium | 4.10.1680703106-1.el8, 4.11.1683009941-1.el8, 4.11.1698299029-1.el8, 4.11.1706516946-1.el8, 4.12.1683009955-1.el8, 4.12.1686649756-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1684911916-1.el8, 4.13.1698292274-1.el8, 4.13.1706516346-1.el8, 4.14.1706516441-1.el8 | 25.01.2023 |
SB2023012504 SB2023041270 SB2023041272 and 14 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 4.9.1675668922-1.el8, 4.10.1675144701-1.el8, 4.11.1683009941-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1698292274-1.el8, 4.13.1706516346-1.el8, 4.14.1706516441-1.el8 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU66065 - Resource exhaustion CVE-2022-1962 |
CWE-400 | Medium | 4.12.1706515741-1.el8 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 73 more |
||
| #VU62608 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-29599 |
CWE-78 | High | 4.9.1674644684-1.el8, 4.10.1670851835-1.el8, 4.11.1683009941-1.el8, 4.11.1698299029-1.el8, 4.11.1706516946-1.el8, 4.12.1686649756-1.el8, 4.12.1698294000-1.el8, 4.12.1706515741-1.el8, 4.13.1686680473-1.el8, 4.13.1698292274-1.el8, 4.13.1706516346-1.el8, 4.14.1706516441-1.el8 | 26.04.2022 |
SB2022042627 SB2022042724 SB2022050234 and 29 more |
||
| #VU62492 - Origin Validation Error CVE-2021-26291 |
CWE-346 | High | 4.11.1683009941-1.el8, 4.12.1706515741-1.el8, 4.13.1706516346-1.el8 | 22.04.2022 |
SB2021042333 SB2022042228 SB2022072038 and 15 more |
Showing elements 21 - 40 out of 232