CloudBees kayıtları
cloudbees üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %90
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-522 Insufficiently Protected Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-11350İstismar yok | CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via thecloudbees · jenkins operations center · CWE-522 | Kritik9,8 | — | %1,8 | 19 Nis 2019 |
31İzleyin | CVE-2012-0785İstismar yok | Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before cloudbees · jenkins · CWE-400 | Yüksek7,5 | — | %3,4 | 24 Şub 2020 |
27İzleyin | CVE-2013-2034İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.cloudbees · jenkins · CWE-352 | Orta6,8 | — | %1,6 | 14 May 2014 |
24İzleyin | CVE-2012-6073İstismar yok | Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x bjenkins · jenkins · CWE-20 | Orta5,8 | — | %1,8 | 24 Şub 2013 |
18İzleyin | CVE-2012-6072İstismar yok | CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x jenkins · jenkins · CWE-20 | Orta4,3 | — | %1,8 | 24 Şub 2013 |
17İzleyin | CVE-2012-0324İstismar yok | Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.jenkins · jenkins · CWE-79 | Orta4,3 | — | %1,1 | 9 Mar 2012 |
17İzleyin | CVE-2012-0325İstismar yok | Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.jenkins · jenkins · CWE-79 | Orta4,3 | — | %1,1 | 9 Mar 2012 |
14İzleyin | CVE-2012-6074İstismar yok | Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.jenkins · jenkins · CWE-79 | Düşük3,5 | — | %1,4 | 24 Şub 2013 |
11İzleyin | CVE-2013-0158İstismar yok | Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x bjenkins · jenkins | Düşük2,6 | — | %2,5 | 24 Şub 2013 |
9İzleyin | CVE-2013-2033İstismar yok | Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x bjenkins · jenkins · CWE-79 | Düşük2,1 | — | %1,9 | 10 Nis 2014 |
- CVE-2019-1135040Planlayın
CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the
KritikCVSS 9,8İstismar yokEPSS %2cloudbees · jenkins operations center19 Nis 2019
- CVE-2012-078531İzleyin
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before
YüksekCVSS 7,5İstismar yokEPSS %3cloudbees · jenkins24 Şub 2020
- CVE-2013-203427İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.
OrtaCVSS 6,8İstismar yokEPSS %2cloudbees · jenkins14 May 2014
- CVE-2012-607324İzleyin
Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x b
OrtaCVSS 5,8İstismar yokEPSS %2jenkins · jenkins24 Şub 2013
- CVE-2012-607218İzleyin
CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x
OrtaCVSS 4,3İstismar yokEPSS %2jenkins · jenkins24 Şub 2013
- CVE-2012-032417İzleyin
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.
OrtaCVSS 4,3İstismar yokEPSS %1jenkins · jenkins9 Mar 2012
- CVE-2012-032517İzleyin
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.
OrtaCVSS 4,3İstismar yokEPSS %1jenkins · jenkins9 Mar 2012
- CVE-2012-607414İzleyin
Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.
DüşükCVSS 3,5İstismar yokEPSS %1jenkins · jenkins24 Şub 2013
- CVE-2013-015811İzleyin
Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x b
DüşükCVSS 2,6İstismar yokEPSS %2jenkins · jenkins24 Şub 2013
- CVE-2013-20339İzleyin
Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x b
DüşükCVSS 2,1İstismar yokEPSS %2jenkins · jenkins10 Nis 2014