Login Request a demo
JN
Product
Jenkins NeuVector Vulnerability Scanner Plugin
by Jenkins project · last CVE Nov 29, 2023
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins NeuVector Vulnerability Scanner Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-30517
5.3
0%
Apr 12
Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector…
Affected: through 1.22
CVE-2022-43434
5.3
1%
Oct 19
Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived…
Affected: through 1.20
CVE-2023-49674
4.3
0%
Nov 29
A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…
Affected: through 1.22
Showing 3