Cloudbees Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Continuous Integration Software	66
Cloud Software	4
Jenkins Plugin	2
Virtualization Software	2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

CloudBees Jenkins	66
CloudBees AWS Credentials Plugin	2
CloudBees Enterprise	2
CloudBees Docker Hub Registry Notification Plugin	2
CloudBees Directory	2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix	68
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High	2
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	70

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	70

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined	0
High	0
Low	28
None	46

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined	0
Required	40
None	34

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	8
≤5	20
≤6	16
≤7	18
≤8	8
≤9	4
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	8
≤5	20
≤6	30
≤7	10
≤8	4
≤9	2
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	18
≤6	12
≤7	18
≤8	14
≤9	4
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	0
≤7	2
≤8	6
≤9	2
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k	16
<2k	30
<5k	28
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k	72
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (6): AWS Credentials Plugin (3), Directory (1), Docker Hub Registry Notification Plugin (1), Enterprise (1), Jenkins (67), Jenkins Operations Center (1)

Link to Vendor Website: https://www.cloudbees.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
11/15/2022	6.9	6.9	CloudBees Docker Hub Registry Notification Plugin authorization	Virtualization Software	Not Defined	Not Defined	0.00071	0.00	CVE-2022-45385
03/16/2022	4.3	4.3	CloudBees AWS Credentials Plugin cross-site request forgery	Cloud Software	Not Defined	Not Defined	0.00068	0.00	CVE-2022-27198
03/16/2022	5.5	5.5	CloudBees AWS Credentials Plugin authorization	Jenkins Plugin	Not Defined	Not Defined	0.00054	0.00	CVE-2022-27199
03/18/2021	4.9	4.9	CloudBees AWS Credentials Plugin authorization	Jenkins Plugin	Not Defined	Not Defined	0.00054	0.00	CVE-2021-21625
04/19/2019	7.5	7.5	CloudBees Jenkins Operations Center Configuration Page Credentials credentials management	Continuous Integration Software	Not Defined	Not Defined	0.00502	0.04	CVE-2019-11350
05/17/2016	5.9	5.7	CloudBees Jenkins API URL xml information disclosure	Continuous Integration Software	Not Defined	Official Fix	0.00152	0.00	CVE-2016-3727
05/17/2016	7.4	7.2	CloudBees Jenkins redirect	Continuous Integration Software	Not Defined	Official Fix	0.00268	0.02	CVE-2016-3726
05/17/2016	5.9	5.7	CloudBees Jenkins Updater access control	Continuous Integration Software	Not Defined	Official Fix	0.00155	0.00	CVE-2016-3725
05/17/2016	7.0	6.8	CloudBees Jenkins Job Configuration Password information disclosure	Continuous Integration Software	Not Defined	Official Fix	0.00152	0.00	CVE-2016-3724
05/17/2016	5.9	5.7	CloudBees Jenkins XML/JSON API Endpoint information disclosure	Continuous Integration Software	Not Defined	Official Fix	0.00152	0.00	CVE-2016-3723

64 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 64 results.

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!