JA
Product
Jenkins Applitools Eyes Plugin
by Jenkins Project · last CVE Jul 9, 2025
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Jenkins Applitools Eyes Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53742
6.5
0%
Jul 9
Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with…
Affected: through 1.16.5
CVE-2025-53658
5.4
0%
Jul 9
Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable…
Affected: through 1.16.5
CVE-2025-53743
5.3
0%
Jul 9
Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and…
Affected: through 1.16.5
Showing 3