Jenkins Contrast Continuous Application Security Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-24. Vendor: Jenkins Project.

CVEs of Jenkins Contrast Continuous Application Security Plugin

• CVE-2026-57299 - CVSS 4.3 (medium), 2026-06-24: Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to…
• CVE-2026-57298 - CVSS 5.4 (medium), 2026-06-24: A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins…
• CVE-2026-57297 - CVSS 5.4 (medium), 2026-06-24: A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to…
• CVE-2022-43420 - CVSS 5.4 (medium), 2022-10-19: Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report,…