CVE-2020-2312: Jenkins Sqlplus Script Runner

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.

Affected products

• Jenkins Sqlplus Script Runner: up to and including 2.0.12

Published 2020-11-04. Last modified 2026-06-17.