Anchore Container Image Scanner (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2022-09-21. Vendor: Jenkins.

CVEs of Anchore Container Image Scanner

• CVE-2022-41225 - CVSS 5.4 (medium), 2022-09-21: Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site…
• CVE-2019-16542 - CVSS 6.5 (medium), 2019-11-21: Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can…