Official Owasp Zap (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2026-06-24. Vendor: Jenkins.

CVEs of Official Owasp Zap

• CVE-2026-57301 - CVSS 8.8 (high), 2026-06-24: Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with…
• CVE-2019-1003060 - CVSS 8.8 (high), 2019-04-04: Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with…