Static Analysis Utilities (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 98 known versions, newest CVE from 2020-11-04. Vendor: Jenkins.

CVEs of Static Analysis Utilities

• CVE-2020-2316 - CVSS 5.4 (medium), 2020-11-04: Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS)…
• CVE-2019-10307 - CVSS 6.5 (medium), 2019-04-30: A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form…
• CVE-2019-10308 - CVSS 6.5 (medium), 2019-04-30: A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method…
• CVE-2017-1000102 - CVSS 5.4 (medium), 2017-10-05: The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to…