Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:servicenow_devops:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductServicenow Devops (5a69f54a-2ed5-511f-9566-3f9b8d27500a)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3442 vulnerable 2026-06-08 06:09:39.570038 Missing Authorization in Jenkins plug-in for ServiceNow DevOps
HIGH (7.7)
A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.
Published: 2023-07-26T18:32:19.787Z
Updated: 2024-10-15T15:53:14.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3414 vulnerable 2026-06-08 06:09:39.512081 Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps
MEDIUM (6.1)
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.
Published: 2023-07-26T18:20:18.253Z
Updated: 2024-10-15T15:54:57.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.