CVE-2022-45391: Jenkins Ns-Nd Integration Performance Publisher

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.

Affected products

• Jenkins Ns-Nd Integration Performance Publisher: before 4.8.0.146 (fixed in 4.8.0.146)

Published 2022-11-15. Last modified 2026-06-17.