CVE-2025-30197: Jenkins Zoho Qengine

Low severity, CVSS 3.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.

Affected products

• Jenkins Zoho Qengine: up to and including 1.0.29.vfa_cc23396502

Published 2025-03-19. Last modified 2026-06-17.