Jenkins Google Compute Engine — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Google Compute Engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-16548 — CVSS 8.8 (high): A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision…
• CVE-2023-49673 — CVSS 8.8 (high): A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to…
• CVE-2019-16546 — CVSS 5.9 (medium): Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling…
• CVE-2019-16547 — CVSS 4.3 (medium): Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with…
• CVE-2022-29052 — CVSS 4.3 (medium): Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins…
• CVE-2023-49652 — CVSS 2.7 (low): Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global…