| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-1003046 | 4.3 |
A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003042 | 3.5 |
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003045 | 4.0 |
A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003044 | 2.1 |
A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003041 | 7.5 |
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003040 | 7.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003048 | 2.1 |
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003043 | 3.5 |
A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003047 | 4.0 |
A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003041 | 7.5 |
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
30-09-2020 - 12:41 | 28-03-2019 - 18:29 | |
| CVE-2019-1003040 | 7.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
30-09-2020 - 12:41 | 28-03-2019 - 18:29 | |
| CVE-2019-1003043 | 3.5 |
A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing
|
30-09-2020 - 12:38 | 28-03-2019 - 18:29 | |
| CVE-2019-1003045 | 4.0 |
A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.
|
30-09-2020 - 12:38 | 28-03-2019 - 18:29 | |
| CVE-2019-1003047 | 4.0 |
A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
|
30-09-2020 - 12:37 | 28-03-2019 - 18:29 | |
| CVE-2019-1003048 | 2.1 |
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
|
29-09-2020 - 18:23 | 28-03-2019 - 18:29 |