CVE-2025-53656

The Jenkins ReadyAPI Functional Testing Plugin (version 1.11 and earlier ) is vulnerable to sensitive information disclosure. The plugin stores SLM License Access Keys , client secrets , and passwords unencrypted in plaintext within the config.xml files on the Jenkins controller. Additionally, th...

CVE-2025-53657

The Jenkins ReadyAPI Functional Testing Plugin (also identified as org.jenkins-ci.plugins:soapui-pro-functional-testing) version 1.11 and earlier contains a vulnerability where SLM License Access Keys , client secrets , and passwords are not properly masked on the job configuration form. Addition...