CVE-2018-1999005

🗓️ 23 Jul 2018 19:00:29Reported by [email protected]Type

A cross-site scripting vulnerability in Jenkins 2.132 and earlier, 2.121.1 and earlier allows attackers to execute JavaScript in another user's browser

Reporter	Title	Published	Views	Family All 14
RedhatCVE	CVE-2018-1999005	30 Jul 201803:49	–	redhatcve
Prion	Cross site scripting	23 Jul 201819:29	–	prion
OSV	CVE-2018-1999005	23 Jul 201819:29	–	osv
OSV	Improper Neutralization of Input During Web Page Generation in Jenkins	13 May 202201:01	–	osv
CVE	CVE-2018-1999005	23 Jul 201819:29	–	cve
Github Security Blog	Improper Neutralization of Input During Web Page Generation in Jenkins	13 May 202201:01	–	github
Cvelist	CVE-2018-1999005	23 Jul 201819:00	–	cvelist
ArchLinux	[ASA-201807-14] jenkins: multiple issues	21 Jul 201800:00	–	archlinux
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (20a1881e-8a9e-11e8-bddf-d017c2ca229d)	20 Jul 201800:00	–	nessus
Tenable Nessus	Jenkins < 2.121.2 / 2.133 Multiple Vulnerabilities	9 Aug 201800:00	–	nessus

Nvd

Node

jenkins jenkinsRange≤2.121.1

jenkins jenkinsRange2.122–2.132

Node

oracle communications_cloud_native_core_automated_test_suiteMatch1.9.0

Source	Link
jenkins	www.jenkins.io/security/advisory/2018-07-18/
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jul 2018 19:29Current

5.1Medium risk

Vulners AI Score5.1

CVSS23.5

CVSS35.4

EPSS0.0022

CWE-79