4.3

CVE-2012-0325

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cloudbees ≫ Jenkins Version <= 1.453
Jenkins ≫ Jenkins Version 1.301
Jenkins ≫ Jenkins Version 1.302
Jenkins ≫ Jenkins Version 1.303
Jenkins ≫ Jenkins Version 1.304
Jenkins ≫ Jenkins Version 1.305
Jenkins ≫ Jenkins Version 1.306
Jenkins ≫ Jenkins Version 1.307
Jenkins ≫ Jenkins Version 1.308
Jenkins ≫ Jenkins Version 1.309
Jenkins ≫ Jenkins Version 1.310
Jenkins ≫ Jenkins Version 1.311
Jenkins ≫ Jenkins Version 1.312
Jenkins ≫ Jenkins Version 1.313
Jenkins ≫ Jenkins Version 1.314
Jenkins ≫ Jenkins Version 1.315
Jenkins ≫ Jenkins Version 1.316
Jenkins ≫ Jenkins Version 1.317
Jenkins ≫ Jenkins Version 1.318
Jenkins ≫ Jenkins Version 1.319
Jenkins ≫ Jenkins Version 1.320
Jenkins ≫ Jenkins Version 1.321
Jenkins ≫ Jenkins Version 1.322
Jenkins ≫ Jenkins Version 1.323
Jenkins ≫ Jenkins Version 1.324
Jenkins ≫ Jenkins Version 1.325
Jenkins ≫ Jenkins Version 1.326
Jenkins ≫ Jenkins Version 1.327
Jenkins ≫ Jenkins Version 1.328
Jenkins ≫ Jenkins Version 1.329
Jenkins ≫ Jenkins Version 1.330
Jenkins ≫ Jenkins Version 1.331
Jenkins ≫ Jenkins Version 1.332
Jenkins ≫ Jenkins Version 1.333
Jenkins ≫ Jenkins Version 1.334
Jenkins ≫ Jenkins Version 1.335
Jenkins ≫ Jenkins Version 1.336
Jenkins ≫ Jenkins Version 1.337
Jenkins ≫ Jenkins Version 1.338
Jenkins ≫ Jenkins Version 1.339
Jenkins ≫ Jenkins Version 1.340
Jenkins ≫ Jenkins Version 1.341
Jenkins ≫ Jenkins Version 1.342
Jenkins ≫ Jenkins Version 1.343
Jenkins ≫ Jenkins Version 1.344
Jenkins ≫ Jenkins Version 1.345
Jenkins ≫ Jenkins Version 1.346
Jenkins ≫ Jenkins Version 1.347
Jenkins ≫ Jenkins Version 1.348
Jenkins ≫ Jenkins Version 1.349
Jenkins ≫ Jenkins Version 1.350
Jenkins ≫ Jenkins Version 1.351
Jenkins ≫ Jenkins Version 1.352
Jenkins ≫ Jenkins Version 1.353
Jenkins ≫ Jenkins Version 1.354
Jenkins ≫ Jenkins Version 1.355
Jenkins ≫ Jenkins Version 1.356
Jenkins ≫ Jenkins Version 1.357
Jenkins ≫ Jenkins Version 1.358
Jenkins ≫ Jenkins Version 1.359
Jenkins ≫ Jenkins Version 1.360
Jenkins ≫ Jenkins Version 1.361
Jenkins ≫ Jenkins Version 1.362
Jenkins ≫ Jenkins Version 1.363
Jenkins ≫ Jenkins Version 1.364
Jenkins ≫ Jenkins Version 1.365
Jenkins ≫ Jenkins Version 1.366
Jenkins ≫ Jenkins Version 1.367
Jenkins ≫ Jenkins Version 1.368
Jenkins ≫ Jenkins Version 1.369
Jenkins ≫ Jenkins Version 1.370
Jenkins ≫ Jenkins Version 1.371
Jenkins ≫ Jenkins Version 1.372
Jenkins ≫ Jenkins Version 1.373
Jenkins ≫ Jenkins Version 1.374
Jenkins ≫ Jenkins Version 1.375
Jenkins ≫ Jenkins Version 1.376
Jenkins ≫ Jenkins Version 1.377
Jenkins ≫ Jenkins Version 1.378
Jenkins ≫ Jenkins Version 1.379
Jenkins ≫ Jenkins Version 1.380
Jenkins ≫ Jenkins Version 1.382
Jenkins ≫ Jenkins Version 1.383
Jenkins ≫ Jenkins Version 1.384
Jenkins ≫ Jenkins Version 1.386
Jenkins ≫ Jenkins Version 1.387
Jenkins ≫ Jenkins Version 1.388
Jenkins ≫ Jenkins Version 1.389
Jenkins ≫ Jenkins Version 1.390
Jenkins ≫ Jenkins Version 1.391
Jenkins ≫ Jenkins Version 1.392
Jenkins ≫ Jenkins Version 1.393
Jenkins ≫ Jenkins Version 1.394
Jenkins ≫ Jenkins Version 1.395
Jenkins ≫ Jenkins Version 1.396
Jenkins ≫ Jenkins Version 1.397
Jenkins ≫ Jenkins Version 1.398
Jenkins ≫ Jenkins Version 1.399
Jenkins ≫ Jenkins Version 1.400
Jenkins ≫ Jenkins Version 1.401
Jenkins ≫ Jenkins Version 1.402
Jenkins ≫ Jenkins Version 1.403
Jenkins ≫ Jenkins Version 1.404
Jenkins ≫ Jenkins Version 1.405
Jenkins ≫ Jenkins Version 1.406
Jenkins ≫ Jenkins Version 1.407
Jenkins ≫ Jenkins Version 1.408
Jenkins ≫ Jenkins Version 1.409
Jenkins ≫ Jenkins Version 1.409.1
Jenkins ≫ Jenkins Version 1.409.2
Jenkins ≫ Jenkins Version 1.410
Jenkins ≫ Jenkins Version 1.411
Jenkins ≫ Jenkins Version 1.412
Jenkins ≫ Jenkins Version 1.413
Jenkins ≫ Jenkins Version 1.414
Jenkins ≫ Jenkins Version 1.415
Jenkins ≫ Jenkins Version 1.416
Jenkins ≫ Jenkins Version 1.417
Jenkins ≫ Jenkins Version 1.418
Jenkins ≫ Jenkins Version 1.419
Jenkins ≫ Jenkins Version 1.420
Jenkins ≫ Jenkins Version 1.421
Jenkins ≫ Jenkins Version 1.422
Jenkins ≫ Jenkins Version 1.423
Jenkins ≫ Jenkins Version 1.424
Jenkins ≫ Jenkins Version 1.425
Jenkins ≫ Jenkins Version 1.426
Jenkins ≫ Jenkins Version 1.427
Jenkins ≫ Jenkins Version 1.428
Jenkins ≫ Jenkins Version 1.429
Jenkins ≫ Jenkins Version 1.430
Jenkins ≫ Jenkins Version 1.431
Jenkins ≫ Jenkins Version 1.432
Jenkins ≫ Jenkins Version 1.433
Jenkins ≫ Jenkins Version 1.434
Jenkins ≫ Jenkins Version 1.435
Jenkins ≫ Jenkins Version 1.436
Jenkins ≫ Jenkins Version 1.437
Cloudbees ≫ Jenkins Version 1.400 Edition enterprise
Cloudbees ≫ Jenkins Version 1.400.0.12 Edition enterprise
Cloudbees ≫ Jenkins Version 1.424 Edition enterprise
Cloudbees ≫ Jenkins Version 1.424.5 Edition enterprise
Cloudbees ≫ Jenkins Version 1.400 Edition lts
Cloudbees ≫ Jenkins Version 1.400.0.12 Edition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.12% 0.625
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb
Vendor Advisory
http://www.securityfocus.com/bid/52384
http://jvn.jp/en/jp/JVN79950061/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023