Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-92136

Stored XSS via Unescaped CWE Values in Dependency‑Check Plugin

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Project
Products
Jenkins Owasp Dependency-check Plugin