org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1370 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5.6.sec03)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.0, =1.0, =0.0.1,...

Jenkins plugins Multiple Vulnerabilities (2026-05-27)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross- site scripting XSS vulnerability...

RHCOS 3 : Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2019:2651)

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2651 advisory. - jenkins-plugin-script-security: Sandbox bypass through type casts in Script Security Plugin CVE-2019-10355 -...

RHCOS 4 : OpenShift Container Platform 4.4.33 (RHSA-2021:0282)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0282 advisory. - jenkins-2-plugins/subversion: XML parser is not preventing XML external entity XXE attacks CVE-2020-2304 -...

RHCOS 4 : OpenShift Container Platform 4.4.20 jenkins-2-plugins (RHSA-2020:3625)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3625 advisory. - jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps CVE-2020-2181 -...

RHCOS 4 : OpenShift Container Platform 4.5.4 jenkins-2-plugins (RHSA-2020:3207)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3207 advisory. - jenkins-script-security-plugin: cross-site scripting vulnerability due to configure sandboxed scripts CVE-2020-2190 Note that Nessus has no...

RHCOS 3 : OpenShift Container Platform 3.11.318 jenkins-2-plugins (RHSA-2020:5102)

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5102 advisory. - jenkins-2-plugins/mailer: Missing hostname validation in Mailer Plugin could result in MITM CVE-2020-2252 -...

RHCOS 4 : OpenShift Container Platform 4.7.48 (RHSA-2022:1248)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1248 advisory. - workflow-cps: OS command execution through crafted SCM contents CVE-2022-25173 - workflow-cps-global-lib: OS command execution...

RHCOS 3 : OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2020:0964)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0964 advisory. - openshift/jenkins-plugin: Deserialization in snakeyaml YAML objects allows for remote code execution CVE-2020-2167 Note that Nessus has not...

RHCOS 4 : Red Hat OpenShift Container Platform 4.1 jenkins-2-plugins (RHSA-2019:2662)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2662 advisory. - jenkins-plugin-script-security: Sandbox bypass through type casts in Script Security Plugin CVE-2019-10355 -...

RHCOS 4 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory. - jenkins-script-security-plugin: sandbox protection bypass leads to execute arbitrary code in sandboxed scripts CVE-2019-16538 -...

RHCOS 4 : OpenShift Container Platform 4.7.52 paackages (RHSA-2022:4909)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4909 advisory. - credentials: Stored XSS vulnerabilities in jenkins plugin CVE-2022-29036 - subversion: Stored XSS vulnerabilities in Jenkins...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1370 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (2.5.6.sec03)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.0, =1.0, =0.0.1,...

Jenkins plugins Multiple Vulnerabilities (2026-04-29)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file. This results in a stored cross-site...

org.jenkins-ci.main:jenkins-test-harness (1.640), org.jenkins-ci.main:jenkins-war (1.640) +1 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.640)

org.jenkins-ci.main:jenkins-core MAVEN version 1.640 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.640 - org.jenkins-ci.main:jenkins-war 1.640 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), com.groupon.jenkins-ci.plugins:dotci (>=2.6.0, <=2.9.2) +16 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.596)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 - com.groupon.jenkins-ci.plugins:dotc...