Lucene search
HistoryOct 10, 2014 - 2:55 p.m.
CVE-2014-3678
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.9%
Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
jenkins-cimonitoring_pluginRange≤1.52.1cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.40.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.41.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.42.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.43.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.44.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.45.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.46.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.47.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.48.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.49.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.50.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.51.0cloudbees_jenkins
ORjenkins-cimonitoring_pluginMatch1.52.0cloudbees_jenkins
Related
cve
cve
CVE-2014-3678
2014-10-10 14:55:07
veracode
veracode
Cross-site Scripting (XSS)
2019-05-02 04:56:02
prion
prion
Cross site scripting
2014-10-10 14:55:00
cvelist
cvelist
CVE-2014-3678
2014-10-10 14:00:00
archlinux
archlinux
jenkins: multiple issues
2014-10-02 00:00:00
nessus
nessus
freebsd
freebsd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.9%
Related for NVD:CVE-2014-3678