CVE-2023-49674: Jenkins Neuvector Vulnerability Scanner

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

Affected products

• Jenkins Neuvector Vulnerability Scanner: up to and including 1.22

Published 2023-11-29. Last modified 2026-06-17.