GCVE - cpe:2.3:a:jenkins_project:jenkins_p4_plugin:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_p4_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jenkins Project (`860cd631-1316-551d-89a3-5aa9a0d4f462`)
Product	Jenkins P4 Plugin (`23c60a33-69db-531d-a210-3773bc57857e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21655`	vulnerable	2026-06-08 05:29:13.087404	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password. Published: 2021-05-11T14:15:25.000Z Updated: 2024-08-03T18:23:27.403Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21654`	vulnerable	2026-06-08 05:29:13.086244	Details available Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password. Published: 2021-05-11T14:15:24.000Z Updated: 2024-08-03T18:23:27.372Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2142`	vulnerable	2026-06-08 05:24:58.977941	Details available A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds. Published: 2020-03-09T15:00:59.000Z Updated: 2024-08-04T07:01:40.958Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 http://www.openwall.com/lists/oss-security/2020/03/09/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2141`	vulnerable	2026-06-08 05:24:58.976816	Details available A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce. Published: 2020-03-09T15:00:59.000Z Updated: 2024-08-04T07:01:41.195Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 http://www.openwall.com/lists/oss-security/2020/03/09/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.