2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45395 | CRITICAL | 9.8 | 1.1% | Nov 15, 2022 | Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2022-45394 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to de... |
| CVE-2022-45393 | LOW | 3.5 | 0.4% | Nov 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delet... |
| CVE-2022-45392 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.... |
| CVE-2022-45391 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/T... |
| CVE-2022-45390 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission t... |
| CVE-2022-45389 | MEDIUM | 5.3 | 0.6% | Nov 15, 2022 | A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds o... |
| CVE-2022-45388 | HIGH | 7.5 | 1.1% | Nov 15, 2022 | Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allow... |
| CVE-2022-45387 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build logs before rendering it on the Jenkin... |
| CVE-2022-45386 | MEDIUM | 5.5 | 0.3% | Nov 15, 2022 | Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) atta... |
| CVE-2022-45385 | HIGH | 7.5 | 0.6% | Nov 15, 2022 | A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows unauthe... |
| CVE-2022-45384 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xm... |
| CVE-2022-45383 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Supp... |
| CVE-2022-45382 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered... |
| CVE-2022-45381 | HIGH | 8.1 | 1.3% | Nov 15, 2022 | Jenkins Pipeline Utility Steps Plugin 2.13.1 and earlier does not restrict the set of enabled prefix interpolators and b... |
| CVE-2022-45380 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in a... |
| CVE-2022-45379 | HIGH | 7.5 | 0.5% | Nov 15, 2022 | Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the ... |
| CVE-2022-38666 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificat... |
| CVE-2022-27895 | HIGH | 7.5 | 0.4% | Nov 15, 2022 | Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying l... |
| CVE-2022-41558 | MEDIUM | 5.4 | 0.5% | Nov 15, 2022 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Ana... |
| CVE-2022-43071 | MEDIUM | 5.5 | 0.3% | Nov 15, 2022 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial o... |
| CVE-2022-3998 | CRITICAL | 9.8 | 0.5% | Nov 15, 2022 | A vulnerability, which was classified as critical, was found in MonikaBrzica scm. This affects an unknown part of the fi... |
| CVE-2022-3997 | MEDIUM | 6.1 | 0.4% | Nov 15, 2022 | A vulnerability, which was classified as critical, has been found in MonikaBrzica scm. Affected by this issue is some un... |
| CVE-2022-42001 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account a... |
| CVE-2022-42000 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now