Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:vmanager-plugin

5 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 medium
Registry
Maven Central

Advisories 5

  • CVE-2025-47887Medium 4.3

    Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read…

    Affected: fixed in 4.0.1-288.v8804b_ea_a_cb_7f.

  • CVE-2025-47886Medium 4.3

    A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows…

    Affected: fixed in 4.0.1-288.v8804b_ea_a_cb_7f.

  • CVE-2025-31724Medium 4.3

    Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml…

    Affected: fixed in 4.0.1.

  • Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site…

    Affected: fixed in 3.0.5.

  • Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

    Affected: fixed in 2.7.1.