GCVE - cpe:2.3:a:jenkins:cadence_vmanager:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:cadence_vmanager:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Cadence Vmanager (`bdbb8d2a-4346-556d-85ac-71338195802a`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-47887`	vulnerable	2026-06-08 07:27:14.973573	Details available Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password. Published: 2025-05-14T20:35:56.876Z Updated: 2025-05-15T13:26:54.921Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2025-05-14/#SECURITY-3548	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-47886`	vulnerable	2026-06-08 07:27:14.972999	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password. Published: 2025-05-14T20:35:56.297Z Updated: 2025-05-15T13:28:44.778Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2025-05-14/#SECURITY-3548	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-31724`	vulnerable	2026-06-08 07:18:58.479926	Details available Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Published: 2025-04-02T14:59:51.859Z Updated: 2025-04-03T13:29:16.707Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3537	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2243`	vulnerable	2026-06-08 05:24:59.146922	Details available Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission. Published: 2020-09-01T13:50:32.000Z Updated: 2024-08-04T07:01:41.183Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1936 http://www.openwall.com/lists/oss-security/2020/09/01/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10446`	vulnerable	2026-06-08 05:12:23.339799	Details available Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM. Published: 2019-10-16T13:00:48.000Z Updated: 2024-08-04T22:24:18.510Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1615	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.