https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:34:07.303448+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03627 cnvd-2018-03627 2026-10-16T16:34:07.352463+00:00 cnvd-2018-03627 https://cve.radiocsirt.org/vuln/euvd-2026-80857 EUVD-2026-80857 2026-10-16T16:34:07.352501+00:00 EUVD-2026-80857 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000396 fkie_cve-2017-1000396 2026-10-16T16:34:07.352515+00:00

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins.

 https://cve.radiocsirt.org/vuln/ghsa-fq9f-9wv9-rfmg GHSA-fq9f-9wv9-rfmg — Improper Certificate Validation in Jenkins 2026-10-16T16:34:07.352546+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000396 gsd-2017-1000396 2026-10-16T16:34:07.352571+00:00 gsd-2017-1000396