CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2196

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.6%

CVSS Severity

CVSS v3 Score 8.0

CVSS v2 Score 6.0

References

Products affected by CVE-2020-2196

Jenkins » Selenium » Version: 1.0

cpe:2.3:a:jenkins:selenium:1.0
Jenkins » Selenium » Version: 1.1

cpe:2.3:a:jenkins:selenium:1.1
Jenkins » Selenium » Version: 1.2

cpe:2.3:a:jenkins:selenium:1.2
Jenkins » Selenium » Version: 1.3

cpe:2.3:a:jenkins:selenium:1.3
Jenkins » Selenium » Version: 1.4

cpe:2.3:a:jenkins:selenium:1.4
Jenkins » Selenium » Version: 1.5

cpe:2.3:a:jenkins:selenium:1.5
Jenkins » Selenium » Version: 2.0

cpe:2.3:a:jenkins:selenium:2.0
Jenkins » Selenium » Version: 2.1

cpe:2.3:a:jenkins:selenium:2.1
Jenkins » Selenium » Version: 2.2

cpe:2.3:a:jenkins:selenium:2.2
Jenkins » Selenium » Version: 2.3

cpe:2.3:a:jenkins:selenium:2.3
Jenkins » Selenium » Version: 2.4

cpe:2.3:a:jenkins:selenium:2.4
Jenkins » Selenium » Version: 2.4.1

cpe:2.3:a:jenkins:selenium:2.4.1
Jenkins » Selenium » Version: 2.53.0

cpe:2.3:a:jenkins:selenium:2.53.0
Jenkins » Selenium » Version: 2.53.1

cpe:2.3:a:jenkins:selenium:2.53.1
Jenkins » Selenium » Version: 3.1.0

cpe:2.3:a:jenkins:selenium:3.1.0
Jenkins » Selenium » Version: 3.12.0

cpe:2.3:a:jenkins:selenium:3.12.0
Jenkins » Selenium » Version: 3.141.59

cpe:2.3:a:jenkins:selenium:3.141.59
Jenkins » Selenium » Version: 3.7.1

cpe:2.3:a:jenkins:selenium:3.7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2196

Products

Pricing

Contact Us