CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2279

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or script binding content that can result in arbitrary code execution on the Jenkins controller JVM.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.6%

CVSS Severity

CVSS v3 Score 9.9

CVSS v2 Score 6.5

References

Products affected by CVE-2020-2279

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.62

cpe:2.3:a:jenkins:script_security:1.62
Jenkins » Script Security » Version: 1.63

cpe:2.3:a:jenkins:script_security:1.63
Jenkins » Script Security » Version: 1.63.1

cpe:2.3:a:jenkins:script_security:1.63.1
Jenkins » Script Security » Version: 1.64

cpe:2.3:a:jenkins:script_security:1.64
Jenkins » Script Security » Version: 1.65

cpe:2.3:a:jenkins:script_security:1.65
Jenkins » Script Security » Version: 1.66

cpe:2.3:a:jenkins:script_security:1.66
Jenkins » Script Security » Version: 1.66.1

cpe:2.3:a:jenkins:script_security:1.66.1
Jenkins » Script Security » Version: 1.66.2

cpe:2.3:a:jenkins:script_security:1.66.2
Jenkins » Script Security » Version: 1.66.3

cpe:2.3:a:jenkins:script_security:1.66.3
Jenkins » Script Security » Version: 1.66.4

cpe:2.3:a:jenkins:script_security:1.66.4
Jenkins » Script Security » Version: 1.66.5

cpe:2.3:a:jenkins:script_security:1.66.5
Jenkins » Script Security » Version: 1.67

cpe:2.3:a:jenkins:script_security:1.67
Jenkins » Script Security » Version: 1.68

cpe:2.3:a:jenkins:script_security:1.68
Jenkins » Script Security » Version: 1.69

cpe:2.3:a:jenkins:script_security:1.69
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.70

cpe:2.3:a:jenkins:script_security:1.70
Jenkins » Script Security » Version: 1.71

cpe:2.3:a:jenkins:script_security:1.71
Jenkins » Script Security » Version: 1.72

cpe:2.3:a:jenkins:script_security:1.72
Jenkins » Script Security » Version: 1.73

cpe:2.3:a:jenkins:script_security:1.73
Jenkins » Script Security » Version: 1.74

cpe:2.3:a:jenkins:script_security:1.74
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2279

Products

Pricing

Contact Us