Jenkins Deployment Dashboard — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Deployment Dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-34795 — CVSS 5.4 (medium): Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a…
• CVE-2022-34796 — CVSS 4.3 (medium): A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to…
• CVE-2022-34797 — CVSS 4.3 (medium): A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to…
• CVE-2022-34798 — CVSS 4.3 (medium): Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers…
• CVE-2022-34799 — CVSS 4.3 (medium): Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins…
• CVE-2023-50775 — CVSS 4.3 (medium): A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.