SS
Product
Script Security
On CISA KEVExploited in the wild
45
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 25Medium 12Low 0
Watch
Add Script Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1003029 In wildKEV | 9.9 | Mar 8 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Affected: through 1.53 |
| CVE-2022-43401 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43403 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43404 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2020-2279 | 9.9 | Sep 23 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or… Affected: through 1.74 |
| CVE-2019-10431 | 9.9 | Oct 1 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to… Affected: through 1.64 |
| CVE-2024-34144 | 9.8 | May 2 | A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define… Affected: through 1335.vf07d9ce377a_e |
| CVE-2019-1003040 | 9.8 | Mar 28 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts Affected: through 1.55 |
Showing 8