unspecified jenkins
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-2601 | jenkins 2.44 ; jenkins 2.32.2 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). U | MEDIUM 6.1 | 2.0 % | ||
| CVE-2017-2606 | jenkins 2.44 ; jenkins 2.32.2 | Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that shou | MEDIUM 4.3 | 1.8 % | ||
| CVE-2017-2611 | jenkins 2.44 ; jenkins 2.32.2 | Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /work | MEDIUM 4.3 | 1.9 % |