CVE-2012-4439

CVE-2012-4439: vulnerability in jenkins

Published · Updated

Follow this CVE+ Monitor Jenkins+ Monitor org.jenkins-ci.main:jenkins-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.
Affected products
jenkins · jenkins
Related CVEs — jenkins

In the same product, most dangerous first.

CVE-2012-4438—CVE-2012-4438EPSS 2.4%CVE-2012-4441—CVE-2012-4441EPSS 1.9%CVE-2012-4440—CVE-2012-4440EPSS 1.9%