CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

CVE-2025-47885

The Jenkins Health Advisor by CloudBees Plugin (version 374.v194b_d4f0c8c8 and earlier) is vulnerable to stored cross-site scripting (XSS) . The root cause is a failure to properly escape or encode responses from the Jenkins Health Advisor server. An attacker capable of controlling these server r...

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

Jenkins plugin Health Advisor by CloudBees – Cross-site Scripting Vulnerabilities

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security vulnerability...

Stored XSS vulnerability in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses. cloudbees-jenkins-advisor...

PT-2025-21238 · Cloudbees +1 · Jenkins Health Advisor By Cloudbees Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Health Advisor by CloudBees Plugin versions 374.v194b d4f0c8c8 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape responses from the Jenkins...

CVE-2025-47885: Improper Neutralization of Input During Web Page Generation

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), com.groupon.jenkins-ci.plugins:dotci (>=2.6.0, <=2.9.2) +16 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.596)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 - com.groupon.jenkins-ci.plugins:dotc...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.cloudbees.jenkins.plugins:bees-sdk-plugin (>=1.0, <=1.2), com.cloudbees.jenkins.plugins:cloudbees-credentials (3.3) +48 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.509)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:bees-sdk-plugin =1.0, =0.1.0, =0.1-beta-1, =0.10, =13.5.0, =13.5....

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.cloudbees.jenkins.plugins:bees-sdk-plugin (>=1.0, <=1.2), com.cloudbees.jenkins.plugins:cloudbees-credentials (3.3) +48 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.509)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:bees-sdk-plugin =1.0, =0.1.0, =0.1-beta-1, =0.10, =13.5.0, =13.5....

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.6), net.myrrix:myrrix-web (1.0.0) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.cloudbees:cloudbees-web-container-extras =1.0.0, =1.0.6 - net.myrrix:myrrix-web 1.0.0 -...

org.jenkins-ci.plugins:cloudbees-plugin-gateway (>=1.11, <=4.2) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.3.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:cloudbees-plugin-gateway =1.11, =4.2 Source cves: CVE-2024-47805...

Insertion Of Sensitive Information Into Log File

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source is vulnerable to Insertion Of Sensitive Information Into Log File. The vulnerability is due to the token being printed in the build log as part of the Bitbucket URL. An attacker can view the token and gain unauthorized access...

org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.13)

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: -...