org.jenkins-ci.main:jenkins-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2105Loworg.jenkins-ci.main:jenkins-core: Jenkins REST APIs vulnerable to clickjackingCVE-2020-2104Mediumorg.jenkins-ci.main:jenkins-core: Memory usage graphs accessible to anyone with Overall/ReadCVE-2020-2099Highorg.jenkins-ci.main:jenkins-core: Inbound TCP Agent Protocol/3 authentication bypass in JenkinsCVE-2020-2103Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Diagnostic page exposed session cookiesCVE-2020-2102Mediumorg.jenkins-ci.main:jenkins-core: Non-constant time HMAC comparisonCVE-2020-2100Mediumorg.jenkins-ci.main:jenkins-core: Jenkins vulnerable to UDP amplification reflection attackCVE-2020-2101Mediumorg.jenkins-ci.main:jenkins-core: Non-constant time comparison of inbound TCP agent connection secretCVE-2015-1811Highorg.jenkins-ci.main:jenkins-core: XML external entity (XXE) vulnerability in JenkinsCVE-2015-1809Highorg.jenkins-ci.main:jenkins-core: XML external entity (XXE) vulnerability in JenkinsCVE-2019-10384Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2019-10383Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10354Mediumorg.jenkins-ci.main:jenkins-core: Missing Authorization in JenkinsCVE-2019-10352Mediumorg.jenkins-ci.main:jenkins-core: Improper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2019-10353Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2011-4344Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS)CVE-2014-2060Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Remote Attackers to Hijack SessionsCVE-2013-7330Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to configure restricted projectsCVE-2014-2058Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to execute arbitrary jobsCVE-2014-2061Mediumorg.jenkins-ci.main:jenkins-core: Jenkin allows attackers to obtain passwords by reading the HTML source codeCVE-2014-2063Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Vulnerable to ClickjackingCVE-2014-2062Mediumorg.jenkins-ci.main:jenkins-core: Jenkins does not invalidate the API token when a user is deletedCVE-2014-2064Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to determine whether a user existsCVE-2014-2066Mediumorg.jenkins-ci.main:jenkins-core: Jenkins session fixation vulnerabilityCVE-2014-2065Mediumorg.jenkins-ci.main:jenkins-core: Jenkins cross-site scripting (XSS) vulnerabilityCVE-2014-3661Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Denial of Service vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo