Read the docs

CloudBees

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

CloudBees records in CISA KEV

No CloudBees vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jenkins 9 records LOW Jenkins Operations Center 1 record MEDIUM

Records

9 records in Jenkins · all components

TI-2012-00722 CVE-2012-0785 · GHSA-pchp-c5w8-47gc

Uncontrolled resource consumption in Jenkins

Priority LOW 39

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03351 Published 2020-02-24 Fixed in 1.447, 1.424.2 +2 CWE-400
TI-2013-01805 CVE-2013-2034 · GHSA-fg4r-f9j2-36mw

Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS…

Priority LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentic…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01624 Published 2014-05-14 Fixed in 1.509.1, 1.514 CWE-352
TI-2012-05037 CVE-2012-6073 · GHSA-mqgf-4rw4-2cq2

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and…

Priority LOW 30

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redire…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01825 Published 2013-02-24 Fixed in 1.480.1, 1.491 CWE-20
TI-2012-05036 CVE-2012-6072 · GHSA-2q8v-qx2x-hxjx

CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and…

Priority LOW 24

CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to injec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01825 Published 2013-02-24 Fixed in 1.491, 1.480.1 CWE-20
TI-2012-00312 CVE-2012-0325 · GHSA-cc55-c9j4-m7cx

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01032 Published 2012-03-09 Fixed in 1.454, 1.424.5 CWE-79
TI-2012-00311 CVE-2012-0324 · GHSA-4w4h-8qh9-342x

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01032 Published 2012-03-09 Fixed in 1.454, 1.424.5 CWE-79
TI-2012-05038 CVE-2012-6074 · GHSA-9hr6-5x6g-gg5g

Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authen…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01419 Published 2013-02-24 Fixed in 1.491, 1.480.1 CWE-79
TI-2013-00093 CVE-2013-0158 · GHSA-jwfr-h6jp-9p2g

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and…

Priority LOW 18

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled,…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02455 Published 2013-02-24 Fixed in 1.498, 1.480.2
TI-2013-01804 CVE-2013-2033 · GHSA-826f-32qm-vm3j

Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and…

Priority LOW 15

Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to injec…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01912 Published 2014-04-10 Fixed in 1.509.1, 1.514 CWE-79
Open these records in search →