JX
Product
Jenkins Xooa Plugin
by Jenkins Project · last CVE Jul 9, 2025
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add Jenkins Xooa Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53676
6.5
0%
Jul 9
Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with…
Affected: through 0.0.7
CVE-2025-53677
5.3
0%
Jul 9
Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it
Affected: through 0.0.7
Showing 2