Archive

12 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /12 September 2020 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.0

CVE-2020-2229 Public exploit

Jenkins Cross-Site Scripting vulnerability in help icons

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Aug 12, 2020
High 8.0

CVE-2020-2230 Public exploit EPSS 83%

Jenkins Cross-site Scripting vulnerability in project naming strategy

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Aug 12, 2020