Checkmarx Security Vulnerabilities and Issues — Checkmarx CVE List

Lucene search

JenkinsCheckmarx

2 matches found

CVE•added 2022/02/15 5:15 p.m.•133 views

CVE-2022-25200

A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

8.8CVSS8.6AI score0.00059EPSS

CVE•added 2023/06/14 1:15 p.m.•49 views

CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

8.1CVSS7.9AI score0.0005EPSS