Most recent entries from all

bdu:2022-04867

2026-10-02T20:52:22.010473+00:00

bdu:2022-04867

EUVD-2026-18656

2026-10-02T20:52:22.010520+00:00

EUVD-2026-18656

fkie_cve-2022-36898

2026-10-02T20:52:22.010566+00:00

A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

GHSA-cp5r-xqjr-84gm — Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints

2026-10-02T20:52:22.010609+00:00

Affected: Maven: com.compuware.jenkins:compuware-ispw-operations

Jenkins BMC AMI DevX Code Pipeline Operations Plugin 1.0.8 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those credentials IDs can be used as part of an attack to capture the credentials using another vulnerability.

BMC AMI DevX Code Pipeline Operations Plugin 1.0.9 requires the appropriate permissions to enumerate hosts and ports of Compuware configurations and credentials IDs.

gsd-2022-36898

2026-10-02T20:52:22.010678+00:00

gsd-2022-36898

WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen

2026-10-02T20:52:22.010698+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren