Jenkins Parameterized Trigger — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Parameterized Trigger, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-1000084 — CVSS 6.5 (medium): Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication…
• CVE-2022-27195 — CVSS 5.5 (medium): Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized…