Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.checkmarx.jenkins:checkmarx

4 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 1 medium
Registry
Maven Central

Advisories 4

  • Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

    Affected: fixed in 2023.2.6.

  • CVE-2022-46684Medium 5.4

    Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into…

    Affected: fixed in 2022.4.3.

  • Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an…

    Affected: fixed in 2022.1.3.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an…

    Affected: fixed in 2022.1.3.