Jenkins Parameterized Remote Trigger Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-02. Vendor: Jenkins Project.

CVEs of Jenkins Parameterized Remote Trigger Plugin

• CVE-2026-84676 - CVSS 4.3 (medium), 2026-09-02: Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be…
• CVE-2026-70438 - CVSS 4.3 (medium), 2026-08-05: A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate…
• CVE-2020-2239 - CVSS 4.3 (medium), 2020-09-01: Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it…