com.ibm.devops vulnerabilities

Products

• com.ibm.devops/ibm-cloud-devops 1

Latest com.ibm.devops CVEs

Newest publication first

1. CVE-2025-53663 Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens

   Published 2025-07-09

   Medium·CVSS 6.5

   Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.