Jenkins Azure Vm Agents vulnerabilities
6 CVEs affecting Jenkins Azure Vm Agents, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32990, published 2023-05-16.
More from Jenkins.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2019-1003037, published 2019-03-08. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read…
- CVE-2019-1003035, published 2019-03-08. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java,…
- CVE-2019-1003036, published 2019-03-08. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read…
- CVE-2023-32990, published 2023-05-16. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using…
- CVE-2023-32988, published 2023-05-16. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
- CVE-2023-32989, published 2023-05-16. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using…