Jenkins Pipeline Maven Integration Plugin (Jenkins Project) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-09-06. Vendor: Jenkins Project.

CVEs of Jenkins Pipeline Maven Integration Plugin

• CVE-2023-41934 - CVSS 5.3 (medium), 2023-09-06: Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials…
• CVE-2020-2256 - CVSS 5.4 (medium), 2020-09-16: Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a…
• CVE-2020-2234 - CVSS 6.5 (medium), 2020-08-12: A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an…
• CVE-2020-2233 - CVSS 6.5 (medium), 2020-08-12: A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of…
• CVE-2020-2235 - CVSS 6.5 (medium), 2020-08-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an…
• CVE-2019-10327 - CVSS 8.1 (high), 2019-05-31: An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary…