GC
Product
Google Compute Engine
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 1
Watch
Add Google Compute Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49673 | 8.8 | Nov 29 | A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname… Affected: before 4.551.0 |
| CVE-2019-16548 | 8.8 | Nov 21 | A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provision new agents Affected: before 4.2.0 |
| CVE-2019-16546 | 5.9 | Nov 21 | Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks Affected: before 4.2.0 |
| CVE-2022-29052 | 4.3 | Apr 12 | Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users… Affected: through 4.3.8 |
| CVE-2019-16547 | 4.3 | Nov 21 | Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited… Affected: before 4.2.0 |
| CVE-2023-49652 | 2.7 | Nov 29 | Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (while lacking… Affected: before 4.3.17.1 |
Showing 6