Login Request a demo
FO
Product
Fortify
by Jenkins · last CVE Aug 21, 2023
5
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities5Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fortify to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4303
6.1
0%
Aug 21
Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability
Affected: before 22.2.39
CVE-2023-4301
5.4
0%
Aug 21
A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified…
Affected: before 22.2.39
CVE-2023-4302
4.3
0%
Aug 21
A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using…
Affected: before 22.2.39
CVE-2022-25188
4.3
1%
Feb 15
Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to…
Affected: through 20.2.34
CVE-2020-2107
4.3
1%
Jan 29
Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended…
Affected: through 19.1.29
Showing 5