org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.2.6, <=1.2.7), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2026-48922 via org.jenkins-ci.plugins:credentials-binding (1.13)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.2.6, =1.2.7 -...

org.jenkinsci.plugins:pipeline-model-definition (>=1.2.6, <=1.2.7), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (1.13)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.2.6, =1.2.7 -...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

io.jenkins.blueocean:blueocean (>=1.0.0-b13, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b15, <=1.0.0-b21) +7 more potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.9)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b13, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15...

org.jenkinsci.plugins:pipeline-model-definition (>=1.2.6, <=1.2.7), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2025-53650 via org.jenkins-ci.plugins:credentials-binding (1.13)

org.jenkins-ci.plugins:credentials-binding MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.2.6, =1.2.7 -...

CVE-2025-4986 Stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

A stored Cross-site Scripting XSS vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-4986

CVE-2025-4986 is a stored XSS vulnerability in Dassault Systèmes’ 3DEXPERIENCE Product Manager, specifically the Model Definition feature, affecting releases from R2022x to R2025x. The captured details indicate that an attacker can execute arbitrary script in a user’s browser session via this sto...

CVE-2025-4986 Stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

A stored Cross-site Scripting XSS vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-4986: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

io.jenkins.plugins:opentelemetry (3.1391.vcb_a_a_b_9779d75), org.jenkinsci.plugins:pipeline-model-definition (2.2214.vb_b_34b_2ea_9b_83) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3953.v19f11da_8d2fa)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3953.v19f11da8d2fa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:opentelemetry 3.1391.vcbaab9779d75 -...

org.jenkins-ci.plugins:pipeline-graph-analysis (>=1.7, <=1.9), org.jenkinsci.plugins:pipeline-model-definition (>=1.2.5, <=1.2.7) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.41)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:pipeline-graph-analysis =1.7, =1.2.5, =1.2.5,...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkinsci.plugins:pipeline-model-declarative-agent (0.5), org.jenkinsci.plugins:pipeline-model-definition (>=0.4, <=0.5) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.18)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-declarative-agent 0.5 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b04, <=1.0.0-b17), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b04, <=1.0.0-b17) +6 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b04, =1.0.0-b04, =1.0.0-b04,...

com.arkea.satd:xlrelease-var-setter (>=0.2, <=0.4), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.0.0-b12) +3 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.22)

org.jenkins-ci.plugins:script-security MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.arkea.satd:xlrelease-var-setter =0.2, =1.0.0-b02, =1.2.1, =2.0, =0.1, =0.5 Sourc...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +11 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.29)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b02, <=1.2.0-beta-1) +24 more potentially affected by CVE-2024-52551 via org.jenkinsci.plugins:pipeline-model-definition (>=0.1, <=2.2214.vb_b_34b_2ea_9b_83)

org.jenkinsci.plugins:pipeline-model-definition MAVEN version =0.1, =1.0.0-b02, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15, =1.0.0-b15, =0.1-preview-1, =3.1391.vcbaab9779d75, =365.vc5cf79113809, =2.0.7, =2.0.8 - org.jenkins-ci.plugins:convert-to-pipeline 1.0 and more Source cves:...