Vulnerabilities

Summary — last 7 days

New vulnerabilities2,630▼ 308 vs. last week
Critical / high1,351▲ 88 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)64▼ 462 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (5.4)0.73%—Jenkins Validating String Parameter9/16/20206/17/2026
Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.