Every CVE whose affected-product data names Jenkins Code Dx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2023-2195 — CVSS 4.3 (medium): A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an…
CVE-2023-2196 — CVSS 4.3 (medium): A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the…
CVE-2023-2631 — CVSS 4.3 (medium): A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an…
CVE-2023-2632 — CVSS 4.3 (medium): Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where…
CVE-2023-2633 — CVSS 4.3 (medium): Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the…