Jenkins Conjur Secrets — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Conjur Secrets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-23116 — CVSS 7.5 (high): Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt…
• CVE-2022-23117 — CVSS 7.5 (high): Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve…
• CVE-2022-25190 — CVSS 4.3 (medium): A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate…