2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41707 | MEDIUM | 6.5 | 0.8% | Oct 19, 2022 | Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user o... |
| CVE-2022-43435 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-gene... |
| CVE-2022-43434 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protec... |
| CVE-2022-43433 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-gene... |
| CVE-2022-43432 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user... |
| CVE-2022-43431 | MEDIUM | 4.3 | 0.4% | Oct 19, 2022 | Jenkins Compuware Strobe Measurement Plugin 1.0.1 and earlier does not perform a permission check in an HTTP endpoint, a... |
| CVE-2022-43428 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not lim... |
| CVE-2022-43427 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpo... |
| CVE-2022-43426 | MEDIUM | 5.3 | 0.5% | Oct 19, 2022 | Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potentia... |
| CVE-2022-43425 | MEDIUM | 5.4 | 0.8% | Oct 19, 2022 | Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Par... |
| CVE-2022-43424 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not l... |
| CVE-2022-43423 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controll... |
| CVE-2022-43422 | MEDIUM | 5.3 | 0.7% | Oct 19, 2022 | Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit wh... |
| CVE-2022-43421 | MEDIUM | 5.3 | 0.7% | Oct 19, 2022 | A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers... |
| CVE-2022-43420 | MEDIUM | 5.4 | 0.6% | Oct 19, 2022 | Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast ... |
| CVE-2022-43419 | MEDIUM | 6.5 | 0.7% | Oct 19, 2022 | Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller ... |
| CVE-2022-43418 | MEDIUM | 4.3 | 0.4% | Oct 19, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to conne... |
| CVE-2022-43417 | MEDIUM | 4.3 | 0.6% | Oct 19, 2022 | Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attacke... |
| CVE-2022-43414 | MEDIUM | 5.3 | 0.6% | Oct 19, 2022 | Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a user-specifie... |
| CVE-2022-43413 | MEDIUM | 4.3 | 0.5% | Oct 19, 2022 | Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers wi... |
| CVE-2022-43412 | MEDIUM | 5.3 | 0.5% | Oct 19, 2022 | Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whe... |
| CVE-2022-43411 | MEDIUM | 5.3 | 0.7% | Oct 19, 2022 | Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided... |
| CVE-2022-43410 | MEDIUM | 5.3 | 0.7% | Oct 19, 2022 | Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or schedu... |
| CVE-2022-43409 | MEDIUM | 5.4 | 0.7% | Oct 19, 2022 | Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of h... |
| CVE-2022-43408 | MEDIUM | 6.5 | 0.4% | Oct 19, 2022 | Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now