Jenkins Azure Vm Agents — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Azure Vm Agents, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-32989 — CVSS 8.8 (high): A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to…
• CVE-2019-1003037 — CVSS 6.5 (medium): An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagen…
• CVE-2023-32990 — CVSS 6.5 (medium): A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission…
• CVE-2019-1003035 — CVSS 4.3 (medium): An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagen…
• CVE-2019-1003036 — CVSS 4.3 (medium): A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/Az…
• CVE-2023-32988 — CVSS 4.3 (medium): A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission…