Stored XSS vulnerability in Jenkins Cadence vManager Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-2243 · ADVISORY
• jenkinsci/vmanager-plugin · PACKAGE
• jenkins.io/security/advisory/2020-09-01 · WEB
• openwall.com/lists/oss-security/2020/09/01/3 · WEB

Mais vulnerabilidades de org.jenkins-ci.plugins:vmanager-plugin

• CVE-2025-47887MÉDIO 4.3Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permi…
• CVE-2025-47886MÉDIO 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers…
• CVE-2025-31724MÉDIO 4.3Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files …
• CVE-2019-10446ALTO 8.2Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.