GCVE - cpe:2.3:a:jenkins_project:jenkins_compuware_ispw_operations

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_compuware_ispw_operations_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jenkins Project (`860cd631-1316-551d-89a3-5aa9a0d4f462`)
Product	Jenkins Compuware Ispw Operations Plugin (`b7b3a45f-d45e-58e9-b54f-28bff0c0fa31`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36899`	vulnerable	2026-06-08 05:46:07.991652	Details available Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties. Published: 2022-07-27T14:24:38.000Z Updated: 2024-08-03T10:14:29.353Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2629 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36898`	vulnerable	2026-06-08 05:46:07.990424	Details available A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Published: 2022-07-27T14:24:25.000Z Updated: 2024-08-03T10:14:29.369Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2628 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.