Vulnerabilities of Jenkins project Jenkins Fortify Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-4301 | A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to… | 4.2 Medium | Aug 21, 2023 |
| CVE-2023-4302 | A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission… | 4.2 Medium | Aug 21, 2023 |
| CVE-2023-4303 | Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting… | 4.3 Medium | Aug 21, 2023 |
| CVE-2022-25188 | Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline… | Not rated | Feb 15, 2022 |
| CVE-2020-2107 | Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the… | Not rated | Jan 29, 2020 |
Other Jenkins project products
Jenkins 153
Jenkins Script Security Plugin 39
Jenkins Pipeline: Groovy Plugin 11
Jenkins Active Directory Plugin 11
Jenkins Email Extension Plugin 9
Jenkins GitLab Plugin 8
Jenkins Build Failure Analyzer Plugin 8
Jenkins Job Configuration History Plugin 8
Jenkins OpenId Connect Authentication Plugin 8
Jenkins NS-ND Integration Performance Publisher Plugin 8
Jenkins Pipeline: Shared Groovy Libraries Plugin 8
Jenkins Amazon EC2 Plugin 7