Every CVE whose affected-product data names Jenkins Claim, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2021-21619 — CVSS 5.4 (medium): Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS)…
CVE-2021-21620 — CVSS 4.3 (medium): A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.