Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/jenkins-2-plugins@4.6.1653312933-1?arch=el8
purl pkg:rpm/redhat/jenkins-2-plugins@4.6.1653312933-1?arch=el8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2ftm-axhf-gbbd
Aliases:
CVE-2022-29046
GHSA-wpr6-qvcq-8269
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. There are no reported fixed by versions.
VCID-2jak-uh1e-zbfx
Aliases:
CVE-2022-29036
GHSA-rvg5-f5fj-mxvg
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:58:57.713638+00:00 RedHat Importer Affected by VCID-2ftm-axhf-gbbd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29046.json 38.0.0
2026-04-01T13:58:57.537421+00:00 RedHat Importer Affected by VCID-2jak-uh1e-zbfx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29036.json 38.0.0