Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:jenkins:-:*:*:*:-:*:*:*
part: a version: - update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Jenkins (78ce5d94-d9eb-51da-b42d-749002669f2a) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/jenkins/jenkins |
purl2cpe | 2026-06-01 10:14:17.265384 |
pkg:github/jenkinsci/jenkins |
purl2cpe | 2026-06-01 10:14:17.265386 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9453 |
vulnerable | 2026-06-08 07:00:27.556014 |
Jenkins-image: sensitive data disclosure when using openshift jenkins image
MEDIUM (6.5)
A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.
Published: 2025-07-04T08:36:35.184Z
Updated: 2025-12-12T13:46:49.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34148 |
vulnerable | 2026-06-08 06:37:32.974315 |
Details available
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'.
Published: 2024-05-02T13:28:05.952Z
Updated: 2025-02-13T17:52:27.106Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.