SecBoard
Zurück zur CVE-Übersicht

CVE-2026-117622

MEDIUM(6.1)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Risk Signal Score15/100 — NIEDRIG
  • CVSS 6.1 — Mittel

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

6.1

Technische Schwere

Beschreibung

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.

Betroffene Produkte

  • cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
  • cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*

Referenzen