GCVE - cpe:2.3:a:jenkins:azure_vm_agents:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:azure_vm_agents:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Azure Vm Agents (`a58977bf-eef0-52c9-a6f6-6b6111ba9a67`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jenkinsci/azure-vm-agents-plugin`	purl2cpe	2026-06-01 10:14:17.955421

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-32990`	vulnerable	2026-06-08 06:04:48.153192	Details available A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method. Published: 2023-05-16T16:00:10.379Z Updated: 2025-01-23T20:16:09.691Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32989`	vulnerable	2026-06-08 06:04:48.152856	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method. Published: 2023-05-16T16:00:09.609Z Updated: 2025-01-23T20:23:53.348Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32988`	vulnerable	2026-06-08 06:04:48.152409	Details available A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2023-05-16T16:00:08.899Z Updated: 2025-01-23T20:25:36.761Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(1)	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003037`	vulnerable	2026-06-08 05:12:21.447726	Details available An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2019-03-08T21:00:00.000Z Updated: 2024-08-05T03:07:17.916Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1332 http://www.securityfocus.com/bid/107476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003036`	vulnerable	2026-06-08 05:12:21.447311	Details available A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent. Published: 2019-03-08T21:00:00.000Z Updated: 2024-08-05T03:07:16.789Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1331 http://www.securityfocus.com/bid/107476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003035`	vulnerable	2026-06-08 05:12:21.446910	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.