Login Request a demo
JI
Product
Jira
by Jenkins · last CVE Nov 29, 2023
5
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jira to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-16541
9.9
2%
Nov 21
Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System…
Affected: through 3.0.10
CVE-2023-49673
8.8
0%
Nov 29
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname…
Affected: before 3.1.2
CVE-2018-1000412
8.8
1%
Jan 9
An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to have Jenkins connect to…
Affected: through 3.0.1
CVE-2023-49653
6.5
1%
Nov 29
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture…
Affected: through 3.11
CVE-2022-29041
5.4
1%
Apr 12
Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters,…
Affected: before 3.6.1; 3.7
Showing 5