CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10355

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.2%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2019-10355

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Redhat » Openshift Container Platform » Version: 4.1

cpe:2.3:a:redhat:openshift_container_platform:4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10355

Products

Pricing

Contact Us