CVE-2012-6074 Jenkins allows Cross-Site Scripting (XSS)
LowCVSS 3.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.main/jenkins-core(Maven) | >= 1.481, < 1.491 | 1.491 |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.481 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.482 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.483 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.484 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.485 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.486 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.487 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.488 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.489 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.490 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | < 1.480.1 | 1.480.1 |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.396 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.397 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.398 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.399 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.400 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.401 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.403 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.404 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.405 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.406 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.407 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.408 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409 | No fix listed |
Show 152 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.410 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.411 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.412 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.413 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.414 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.415 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.416 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.417 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.418 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.419 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.420 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.421 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.422 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.423 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.4 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.5 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.6 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.425 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.426 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.427 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.428 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.429 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.430 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.431 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.432 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.433 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.434 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.435 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.436 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.437 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.438 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.439 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.440 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.441 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.442 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.443 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.444 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.445 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.446 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.448 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.449 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.450 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.451 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.452 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.453 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.454 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.455 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.456 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.457 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.458 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.459 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.460 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.461 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.462 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.463 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.464 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.465 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.467 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.468 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.469 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.470 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.471 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.472 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.473 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.474 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.475 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.476 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.477 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.478 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.479 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.480 | No fix listed |
| cloudbees jenkins | <= 1.480.3.1 | No fix listed |
| cloudbees jenkins | = 1.447.1.1 | No fix listed |
| cloudbees jenkins | = 1.447.2.2 | No fix listed |
| cloudbees jenkins | = 1.447.3.1 | No fix listed |
| cloudbees jenkins | = 1.424.0.2 | No fix listed |
| cloudbees jenkins | = 1.424.0.4 | No fix listed |
| cloudbees jenkins | = 1.424.1.1 | No fix listed |
| cloudbees jenkins | = 1.424.2.1 | No fix listed |
| cloudbees jenkins | = 1.424.4.1 | No fix listed |
| cloudbees jenkins | = 1.424.5.1 | No fix listed |
| cloudbees jenkins | = 1.424.6.1 | No fix listed |
| cloudbees jenkins | = 1.424.6.11 | No fix listed |
| cloudbees jenkins | = 1.466.1.2 | No fix listed |
| cloudbees jenkins | = 1.466.2.1 | No fix listed |
| cloudbees jenkins | = 1.400 | No fix listed |
| cloudbees jenkins | = 1.424 | No fix listed |
| cloudbees jenkins | = 1.447 | No fix listed |
| jenkins | = 1.400 | No fix listed |
| jenkins | = 1.401 | No fix listed |
| jenkins | = 1.402 | No fix listed |
| jenkins | = 1.403 | No fix listed |
| jenkins | = 1.404 | No fix listed |
| jenkins | = 1.405 | No fix listed |
| jenkins | = 1.406 | No fix listed |
| jenkins | = 1.407 | No fix listed |
| jenkins | = 1.408 | No fix listed |
| jenkins | = 1.409 | No fix listed |
| jenkins | = 1.410 | No fix listed |
| jenkins | = 1.411 | No fix listed |
| jenkins | = 1.412 | No fix listed |
| jenkins | = 1.413 | No fix listed |
| jenkins | = 1.414 | No fix listed |
| jenkins | = 1.415 | No fix listed |
| jenkins | = 1.416 | No fix listed |
| jenkins | = 1.417 | No fix listed |
| jenkins | = 1.418 | No fix listed |
| jenkins | = 1.419 | No fix listed |
| jenkins | = 1.420 | No fix listed |
| jenkins | = 1.421 | No fix listed |
| jenkins | = 1.422 | No fix listed |
| jenkins | = 1.423 | No fix listed |
| jenkins | = 1.424 | No fix listed |
| jenkins | = 1.425 | No fix listed |
| jenkins | = 1.426 | No fix listed |
| jenkins | = 1.427 | No fix listed |
| jenkins | = 1.428 | No fix listed |
| jenkins | = 1.429 | No fix listed |
| jenkins | = 1.430 | No fix listed |
| jenkins | = 1.431 | No fix listed |
| jenkins | = 1.432 | No fix listed |
| jenkins | = 1.433 | No fix listed |
| jenkins | = 1.434 | No fix listed |
| jenkins | = 1.435 | No fix listed |
| jenkins | = 1.436 | No fix listed |
| jenkins | = 1.437 | No fix listed |
| jenkins | <= 1.466.2 | No fix listed |
| jenkins | = 1.409.1 | No fix listed |
| jenkins | = 1.409.2 | No fix listed |
| jenkins | = 1.409.3 | No fix listed |
| jenkins | = 1.424.1 | No fix listed |
| jenkins | = 1.424.2 | No fix listed |
| jenkins | = 1.424.3 | No fix listed |
| jenkins | = 1.424.4 | No fix listed |
| jenkins | = 1.424.5 | No fix listed |
| jenkins | = 1.424.6 | No fix listed |
| jenkins | = 1.447.1 | No fix listed |
| jenkins | = 1.447.2 | No fix listed |
| jenkins | = 1.466.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- github.com product
- wiki.jenkins-ci.org vendor-advisory
- RHSA-2013:0220 vendor-advisory
- www.cloudbees.com
- [oss-security] 20121227 Re: CVE request: Jenkins mailing-list
- github.com