Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Zowe zDevOps Plugin — Jenkins Security Advisory 2026-06-24 Clear all filters
TI-2026-41244 CVE-2026-57307 · GHSA-xx59-jv36-5r44

Missing authorization in Jenkins Zowe zDevOps Plugin

Priority LOW 19

A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials ID…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00208 Published 2026-06-24 No fix listed CWE-862
TI-2026-41243 CVE-2026-57306 · GHSA-43m2-hcmm-qpm7

Cross-site request forgery in Jenkins Zowe zDevOps Plugin

Priority LOW 19

A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obta…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00184 Published 2026-06-24 No fix listed CWE-352