com.axis.system.jenkins.plugins.downstream vulnerabilities

Products

• com.axis.system.jenkins.plugins.downstream/yet-another-build-visualizer 1

Latest com.axis.system.jenkins.plugins.downstream CVEs

Newest publication first

1. CVE-2020-2236 Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin

   Published 2020-08-12

   Medium·CVSS 5.4 EPSS 0.74%

   Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.