Jenkins Fortify Plugin (Jenkins Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-21. Vendor: Jenkins Project.

CVEs of Jenkins Fortify Plugin

• CVE-2023-4303 - CVSS 6.1 (medium), 2023-08-21: Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.
• CVE-2023-4302 - CVSS 4.3 (medium), 2023-08-21: A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL…
• CVE-2023-4301 - CVSS 5.4 (medium), 2023-08-21: A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using…
• CVE-2022-25188 - CVSS 4.3 (medium), 2022-02-15: Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with…
• CVE-2020-2107 - CVSS 4.3 (medium), 2020-01-29: Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by…