Jenkins

Checkmarx

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2023-35142

  • EPSS 0.05%
  • Published 14.06.2023 13:15:11
  • Last modified 02.01.2025 21:15:09

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

5.4

CVE-2022-46684

  • EPSS 2.95%
  • Published 12.12.2022 09:15:13
  • Last modified 23.04.2025 16:15:28

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.

8.8

CVE-2022-25200

  • EPSS 0.06%
  • Published 15.02.2022 17:15:10
  • Last modified 21.11.2024 06:51:47

A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing cred...

6.5

CVE-2022-25201

  • EPSS 0.11%
  • Published 15.02.2022 17:15:10
  • Last modified 21.11.2024 06:51:47

Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing ...