Jenkins Scm-manager Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-05. Vendor: Jenkins Project.

CVEs of Jenkins Scm-manager Plugin

• CVE-2026-70435 - CVSS 4.2 (medium), 2026-08-05: A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…
• CVE-2026-70434 - CVSS 4.2 (medium), 2026-08-05: A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL…