GCVE - cpe:2.3:a:[unknown]:jenkins:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:[unknown]:jenkins:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	[Unknown] (`5b07108a-8f0c-5d28-ab99-c4ff62adb460`)
Product	Jenkins (`75fa6d37-059e-57b7-84e5-d78227660ddf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-2613`	vulnerable	2026-06-08 05:09:24.732268	Details available MEDIUM (5.4) jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406). Published: 2018-05-15T22:00:00.000Z Updated: 2024-08-05T14:02:07.012Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-02-01/ https://github.com/jenkinsci/jenkins/commit/b88b20ec473200db35d0a0d29dcf192069106601 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2613 http://www.securityfocus.com/bid/95967	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2612`	vulnerable	2026-06-08 05:09:24.731838	Details available MEDIUM (5.4) In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK. Published: 2018-05-15T20:00:00.000Z Updated: 2024-08-05T14:02:06.508Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-02-01/ https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722 http://www.securityfocus.com/bid/95957 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2612	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2610`	vulnerable	2026-06-08 05:09:24.726427	Details available MEDIUM (5.4) jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names (SECURITY-388). Published: 2018-05-15T21:00:00.000Z Updated: 2024-08-05T14:02:06.521Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-02-01/ http://www.securityfocus.com/bid/95951 https://github.com/jenkinsci/jenkins/commit/307ed31caba68a46426b8c73a787a05add2c7489 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2610	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2609`	vulnerable	2026-06-08 05:09:24.726028	Details available MEDIUM (4.3) jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to. Published: 2018-05-22T17:00:00.000Z Updated: 2024-08-05T14:02:07.010Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95964 https://github.com/jenkinsci/jenkins/commit/13905d8224899ba7332fe9af4e330ea96a2ae319 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2609	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2608`	vulnerable	2026-06-08 05:09:24.725634	Details available HIGH (8.8) Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383). Published: 2018-05-15T20:00:00.000Z Updated: 2024-08-05T14:02:06.498Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-02-01/ http://www.securityfocus.com/bid/95953 https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2608	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2607`	vulnerable	2026-06-08 05:09:24.725211	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2604`	vulnerable	2026-06-08 05:09:24.724279	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2603`	vulnerable	2026-06-08 05:09:24.723877	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2602`	vulnerable	2026-06-08 05:09:24.723431	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2600`	vulnerable	2026-06-08 05:09:24.720992	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2599`	vulnerable	2026-06-08 05:09:24.720539	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2598`	vulnerable	2026-06-08 05:09:24.718755	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.