Medium Severity Vulnerabilities

Vulnerability Name	CVE CWE	CWE	Severity
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1812)	CVE-2015-1812 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1813)	CVE-2015-1813 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5326)	CVE-2015-5326 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7536)	CVE-2015-7536 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2601)	CVE-2017-2601 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2607)	CVE-2017-2607 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2610)	CVE-2017-2610 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17383)	CVE-2017-17383 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)	CVE-2017-1000392 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000170)	CVE-2018-1000170 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000407)	CVE-2018-1000407 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1999005)	CVE-2018-1999005 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1999007)	CVE-2018-1999007 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10383)	CVE-2019-10383 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10401)	CVE-2019-10401 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10402)	CVE-2019-10402 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10403)	CVE-2019-10403 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10404)	CVE-2019-10404 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10405)	CVE-2019-10405 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10406)	CVE-2019-10406 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1003050)	CVE-2019-1003050 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2161)	CVE-2020-2161 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2162)	CVE-2020-2162 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2163)	CVE-2020-2163 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2220)	CVE-2020-2220 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2221)	CVE-2020-2221 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2222)	CVE-2020-2222 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2223)	CVE-2020-2223 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2229)	CVE-2020-2229 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2230)	CVE-2020-2230 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2231)	CVE-2020-2231 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21603)	CVE-2021-21603 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21608)	CVE-2021-21608 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21610)	CVE-2021-21610 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21611)	CVE-2021-21611 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34170)	CVE-2022-34170 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34171)	CVE-2022-34171 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-41224)	CVE-2022-41224 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-39151)	CVE-2023-39151 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43495)	CVE-2023-43495 CWE-707	CWE-707	Medium
Jenkins Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2018-1000193)	CVE-2018-1000193 CWE-138	CWE-138	Medium
Jenkins Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2020-2105)	CVE-2020-2105 CWE-1021	CWE-1021	Medium
Jenkins Inadequate Encryption Strength Vulnerability (CVE-2017-2598)	CVE-2017-2598 CWE-326	CWE-326	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2017-2599)	CVE-2017-2599 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2017-2611)	CVE-2017-2611 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999003)	CVE-2018-1999003 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999004)	CVE-2018-1999004 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999047)	CVE-2018-1999047 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2020-2104)	CVE-2020-2104 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2021-21609)	CVE-2021-21609 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2021-21670)	CVE-2021-21670 CWE-863	CWE-863	Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2023-27903)	CVE-2023-27903 CWE-863	CWE-863	Medium
Jenkins Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-2612)	CVE-2017-2612 CWE-732	CWE-732	Medium
Jenkins Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1000864)	CVE-2018-1000864 CWE-835	CWE-835	Medium
Jenkins Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1999044)	CVE-2018-1999044 CWE-835	CWE-835	Medium
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)	CVE-2017-1000400 CWE-862	CWE-862	Medium
Jenkins Missing Authorization Vulnerability (CVE-2019-10354)	CVE-2019-10354 CWE-862	CWE-862	Medium
Jenkins Missing Authorization Vulnerability (CVE-2024-43045)	CVE-2024-43045 CWE-862	CWE-862	Medium
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2101)	CVE-2020-2101		Medium
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2102)	CVE-2020-2102		Medium
Jenkins open user registration	CWE-200	CWE-200	Medium
Jenkins Other Vulnerability (CVE-2015-5319)	CVE-2015-5319		Medium
Jenkins Other Vulnerability (CVE-2020-2100)	CVE-2020-2100		Medium
Jenkins Other Vulnerability (CVE-2022-2048)	CVE-2022-2048		Medium
Jenkins Passwords transmitted in plain text (CVE-2020-2251)	CVE-2020-2251		Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7330)	CVE-2013-7330 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2058)	CVE-2014-2058 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3663)	CVE-2014-3663 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3665)	CVE-2014-3665 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)	CVE-2015-1806 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1810)	CVE-2015-1810 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5323)	CVE-2015-5323 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5324)	CVE-2015-5324 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3722)	CVE-2016-3722 CWE-264	CWE-264	Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3725)	CVE-2016-3725 CWE-264	CWE-264	Medium