GCVE - cpe:2.3:a:jenkins:p4:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:p4:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	P4 (`a5e03ad5-939d-55e9-a0ed-edd6cbf753c7`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21655`	vulnerable	2026-06-08 05:29:13.087546	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password. Published: 2021-05-11T14:15:25.000Z Updated: 2024-08-03T18:23:27.403Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21654`	vulnerable	2026-06-08 05:29:13.086938	Details available Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password. Published: 2021-05-11T14:15:24.000Z Updated: 2024-08-03T18:23:27.372Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2327	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2142`	vulnerable	2026-06-08 05:24:58.977983	Details available A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds. Published: 2020-03-09T15:00:59.000Z Updated: 2024-08-04T07:01:40.958Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 http://www.openwall.com/lists/oss-security/2020/03/09/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2141`	vulnerable	2026-06-08 05:24:58.977549	Details available A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce. Published: 2020-03-09T15:00:59.000Z Updated: 2024-08-04T07:01:41.195Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 http://www.openwall.com/lists/oss-security/2020/03/09/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.