Medium
CVE-2021-22137
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2021-21645
Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
High
CVE-2021-21642
XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin
Medium
CVE-2021-21643
Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
Medium
CVE-2021-21647
Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds
High
CVE-2021-21646
Remote code execution vulnerability in Jenkins Templating Engine Plugin
Medium
CVE-2021-21644
CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files
Medium
CVE-2021-22513
Missing permission checks in Micro Focus Application Automation Tools Plugin
High
CVE-2021-22510
Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22511
SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22512
CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-21641
CSRF vulnerability in Jenkins promoted builds Plugin
Medium
CVE-2021-21640
View name validation bypass in Jenkins
Medium
CVE-2021-21639
Lack of type validation in agent related REST API in Jenkins
Medium
CVE-2021-21634
Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin
High
CVE-2021-21638
CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials
Medium
CVE-2021-21636
Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs
Medium
CVE-2021-21637
Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
Medium
CVE-2021-21632
Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
Medium
CVE-2021-21631
Missing permission check in Jenkins Cloud Statistics Plugin
Medium
CVE-2021-21635
Stored XSS vulnerability in Jenkins REST List Parameter Plugin
High
CVE-2021-21633
CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
Medium
CVE-2021-21628
Stored XSS vulnerability in Jenkins Build With Parameters Plugin
High
CVE-2021-21629
CSRF vulnerability in Jenkins Build With Parameters Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.