PT-2022-20419 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins JDK Parameter Plugin version 1.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which is exploitable by attackers with Item/Configure permission. This occurs because the plugin does not...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.522), org.jenkins-ci.main:jenkins-war (1.522) +4 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.522)

org.jenkins-ci.main:jenkins-core MAVEN version 1.522 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.522 - org.jenkins-ci.main:jenkins-war 1.522 -...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

com.buildcoin.plugins.jenkins:buildcoin-plugin (>=1.0, <=1.4), hudson.plugins.memegen:memegen (>=0.3.2, <=0.5.1) +9 more potentially affected by CVE-2016-3725 via org.jenkins-ci.main:jenkins-core (1.428)

org.jenkins-ci.main:jenkins-core MAVEN version 1.428 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.buildcoin.plugins.jenkins:buildcoin-plugin =1.0, =0.3.2, =pppppppppppppppppppp, =2.0.5,...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.623)

org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...

org.jenkins-ci.main:jenkins-test-harness (1.413), org.jenkins-ci.main:jenkins-war (1.413) +1 more potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.413)

org.jenkins-ci.main:maven-plugin MAVEN version 1.413 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.413 - org.jenkins-ci.main:jenkins-war 1.413 -...

jenkins:repository (>=0.1, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.396) +4 more potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.396)

org.jenkins-ci.main:maven-plugin MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - jenkins:repository =0.1, =0.16, =0.17 Source cves: CVE-2017-1000397 Source advisory:...

org.jenkins-ci.plugins:dependency-check-jenkins-plugin (>=1.3.0, <=3.1.0) potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (2.4)

org.jenkins-ci.main:maven-plugin MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.plugins:dependency-check-jenkins-plugin =1.3.0, =3.1.0 Source cves: CVE-2017-10003...

org.jenkins-ci.main:jenkins-test-harness (1.532), org.jenkins-ci.main:jenkins-war (1.532) +5 more potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.532)

org.jenkins-ci.main:maven-plugin MAVEN version 1.532 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532 - org.jenkins-ci.main:jenkins-war 1.532 -...

org.jenkins-ci.main:jenkins-test-harness (1.426), org.jenkins-ci.main:jenkins-war (1.426) +1 more potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.426)

org.jenkins-ci.main:maven-plugin MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.426 - org.jenkins-ci.main:jenkins-war 1.426 -...

org.jenkins-ci.main:jenkins-test-harness (1.458), org.jenkins-ci.main:jenkins-war (1.458) potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.458)

org.jenkins-ci.main:maven-plugin MAVEN version 1.458 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.458 - org.jenkins-ci.main:jenkins-war 1.458 Source...

org.jenkins-ci.main:jenkins-test-harness (1.463), org.jenkins-ci.main:jenkins-war (1.463) potentially affected by CVE-2017-1000397 via org.jenkins-ci.main:maven-plugin (1.463)

org.jenkins-ci.main:maven-plugin MAVEN version 1.463 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:maven-plugin and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.463 - org.jenkins-ci.main:jenkins-war 1.463 Source...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2017-1000355 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

org.jenkins-ci.main:jenkins-test-harness (1.544), org.jenkins-ci.main:jenkins-war (1.544) +2 more potentially affected by CVE-2017-1000355 via org.jenkins-ci.main:jenkins-core (1.544)

org.jenkins-ci.main:jenkins-core MAVEN version 1.544 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.544 - org.jenkins-ci.main:jenkins-war 1.544 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2017-1000355 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

net.praqma:memory-map (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.485) +8 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.485)

org.jenkins-ci.main:jenkins-core MAVEN version 1.485 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =1.0.0, =1.0, =1.1 - org.jenkins-ci.modules:slave-installer 1.0 -...