Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Script Security Plugin — Jenkins Security Advisory 2026-09-02 Clear all filters
TI-2026-58199 CVE-2026-84659 · GHSA-fc8j-cp67-6ww3

Missing authorization in Jenkins Script Security Plugin

Priority LOW 20

Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disa…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-09-02 Fix deferred CWE-862
TI-2026-58198 CVE-2026-84658 · GHSA-h88x-gpj9-phg2

Information disclosure in Jenkins Script Security Plugin

Priority LOW 20

Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to rea…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00313 Published 2026-09-02 No fix listed CWE-200