Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2026/01/13 7:21 p.m.•42 views

CVE-2025-68701 Jervis has Deterministic AES IV Derivation from Passphrase

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...

8.7CVSS0.00235EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/13 7:21 p.m.•19 views

CVE-2025-68701 Jervis has Deterministic AES IV Derivation from Passphrase

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...

8.7CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•5 views

CVE-2025-68701: Use of a Broken or Risky Cryptographic Algorithm

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...

8.7CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•33 views

PT-2026-2494

CVE-2025-68701 Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. Thi… https://t.co/yRJFluABgT...

8.7CVSS6.9AI score0.00235EPSS
SaveExploits0References4
Rows per page
Query Builder