Login Request a demo
AE
Product
Amazon Ec2
by Jenkins · last CVE May 6, 2020
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Amazon Ec2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2090
8.8
1%
Jan 15
A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using…
Affected: through 1.47
CVE-2020-2091
8.1
1%
Jan 15
A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS…
Affected: through 1.47
CVE-2020-2187
5.6
0%
May 6
Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks
Affected: through 1.50.1
CVE-2020-2185
5.6
1%
May 6
Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks
Affected: through 1.50.1
CVE-2020-2188
4.3
1%
May 6
A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of…
Affected: through 1.50.1
CVE-2020-2186
4.3
1%
May 6
A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances
Affected: through 1.50.1
Showing 6