Jenkins Project Jenkins Job Import Plugin vulnerabilities
5 known vulnerabilities affecting jenkins_project/jenkins_job_import_plugin.
Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2019-1003015P3CRITICALCVSS 9.1v2.1 and earlier2019-02-06
CVE-2019-1003015 [CRITICAL] CWE-611 CVE-2019-1003015: An XML external entity processing vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier
An XML external entity processing vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in src/main/java/org/jenkins/ci/plugins/jobimport/client/RestApiClient.java that allows attackers with the ability to control the HTTP server (Jenkins) queried in preparation of job import to read arbitrary files, perform a denial of service atta
nvd
CVE-2019-1003016P3HIGHCVSS 8.8v2.1 and earlier2019-02-06
CVE-2019-1003016 [HIGH] CWE-352 CVE-2019-1003016: An exposure of sensitive information vulnerability exists in Jenkins Job Import Plugin 2.1 and earli
An exposure of sensitive information vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in src/main/java/org/jenkins/ci/plugins/jobimport/JobImportAction.java, src/main/java/org/jenkins/ci/plugins/jobimport/JobImportGlobalConfig.java, src/main/java/org/jenkins/ci/plugins/jobimport/model/JenkinsSite.java that allows attackers with Ov
nvd
CVE-2019-1003017P4MEDIUMCVSS 5.3v3.0 and earlier2019-02-06
CVE-2019-1003017 [MEDIUM] CWE-352 CVE-2019-1003017: A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAc
A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration.
nvd
CVE-2026-48926P4MEDIUMCVSS 4.3≤ 143.v044a_2e819b_272026-05-27
CVE-2026-48926 [MEDIUM] CWE-269 CVE-2026-48926: Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an
Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
nvd
CVE-2022-43413P4MEDIUMCVSS 4.3≥ unspecified, ≤ 3.52022-10-19
CVE-2022-43413 [MEDIUM] CWE-862 CVE-2022-43413: Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, a
Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
nvd