CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2317

Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to Jenkins FindBugs Plugin's post build step.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.4%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2020-2317

Jenkins » Findbugs » Version: 1.0

cpe:2.3:a:jenkins:findbugs:1.0
Jenkins » Findbugs » Version: 1.1

cpe:2.3:a:jenkins:findbugs:1.1
Jenkins » Findbugs » Version: 1.10

cpe:2.3:a:jenkins:findbugs:1.10
Jenkins » Findbugs » Version: 1.11

cpe:2.3:a:jenkins:findbugs:1.11
Jenkins » Findbugs » Version: 1.12

cpe:2.3:a:jenkins:findbugs:1.12
Jenkins » Findbugs » Version: 1.13

cpe:2.3:a:jenkins:findbugs:1.13
Jenkins » Findbugs » Version: 1.14

cpe:2.3:a:jenkins:findbugs:1.14
Jenkins » Findbugs » Version: 1.15

cpe:2.3:a:jenkins:findbugs:1.15
Jenkins » Findbugs » Version: 1.16

cpe:2.3:a:jenkins:findbugs:1.16
Jenkins » Findbugs » Version: 1.17

cpe:2.3:a:jenkins:findbugs:1.17
Jenkins » Findbugs » Version: 1.18

cpe:2.3:a:jenkins:findbugs:1.18
Jenkins » Findbugs » Version: 1.2

cpe:2.3:a:jenkins:findbugs:1.2
Jenkins » Findbugs » Version: 1.3

cpe:2.3:a:jenkins:findbugs:1.3
Jenkins » Findbugs » Version: 1.4

cpe:2.3:a:jenkins:findbugs:1.4
Jenkins » Findbugs » Version: 1.5

cpe:2.3:a:jenkins:findbugs:1.5
Jenkins » Findbugs » Version: 1.6

cpe:2.3:a:jenkins:findbugs:1.6
Jenkins » Findbugs » Version: 1.7

cpe:2.3:a:jenkins:findbugs:1.7
Jenkins » Findbugs » Version: 1.8

cpe:2.3:a:jenkins:findbugs:1.8
Jenkins » Findbugs » Version: 1.9

cpe:2.3:a:jenkins:findbugs:1.9
Jenkins » Findbugs » Version: 2.0

cpe:2.3:a:jenkins:findbugs:2.0
Jenkins » Findbugs » Version: 2.1

cpe:2.3:a:jenkins:findbugs:2.1
Jenkins » Findbugs » Version: 2.10

cpe:2.3:a:jenkins:findbugs:2.10
Jenkins » Findbugs » Version: 2.11

cpe:2.3:a:jenkins:findbugs:2.11
Jenkins » Findbugs » Version: 2.12

cpe:2.3:a:jenkins:findbugs:2.12
Jenkins » Findbugs » Version: 2.13

cpe:2.3:a:jenkins:findbugs:2.13
Jenkins » Findbugs » Version: 2.14

cpe:2.3:a:jenkins:findbugs:2.14
Jenkins » Findbugs » Version: 2.15

cpe:2.3:a:jenkins:findbugs:2.15
Jenkins » Findbugs » Version: 2.16

cpe:2.3:a:jenkins:findbugs:2.16
Jenkins » Findbugs » Version: 2.17

cpe:2.3:a:jenkins:findbugs:2.17
Jenkins » Findbugs » Version: 2.18

cpe:2.3:a:jenkins:findbugs:2.18
Jenkins » Findbugs » Version: 2.19

cpe:2.3:a:jenkins:findbugs:2.19
Jenkins » Findbugs » Version: 2.2

cpe:2.3:a:jenkins:findbugs:2.2
Jenkins » Findbugs » Version: 2.20

cpe:2.3:a:jenkins:findbugs:2.20
Jenkins » Findbugs » Version: 2.21

cpe:2.3:a:jenkins:findbugs:2.21
Jenkins » Findbugs » Version: 2.22

cpe:2.3:a:jenkins:findbugs:2.22
Jenkins » Findbugs » Version: 2.3

cpe:2.3:a:jenkins:findbugs:2.3
Jenkins » Findbugs » Version: 2.4

cpe:2.3:a:jenkins:findbugs:2.4
Jenkins » Findbugs » Version: 2.5

cpe:2.3:a:jenkins:findbugs:2.5
Jenkins » Findbugs » Version: 2.6

cpe:2.3:a:jenkins:findbugs:2.6
Jenkins » Findbugs » Version: 2.7

cpe:2.3:a:jenkins:findbugs:2.7
Jenkins » Findbugs » Version: 2.8

cpe:2.3:a:jenkins:findbugs:2.8
Jenkins » Findbugs » Version: 2.9

cpe:2.3:a:jenkins:findbugs:2.9
Jenkins » Findbugs » Version: 3.0

cpe:2.3:a:jenkins:findbugs:3.0
Jenkins » Findbugs » Version: 3.1

cpe:2.3:a:jenkins:findbugs:3.1
Jenkins » Findbugs » Version: 3.10

cpe:2.3:a:jenkins:findbugs:3.10
Jenkins » Findbugs » Version: 3.11

cpe:2.3:a:jenkins:findbugs:3.11
Jenkins » Findbugs » Version: 3.12

cpe:2.3:a:jenkins:findbugs:3.12
Jenkins » Findbugs » Version: 3.13

cpe:2.3:a:jenkins:findbugs:3.13
Jenkins » Findbugs » Version: 3.2

cpe:2.3:a:jenkins:findbugs:3.2
Jenkins » Findbugs » Version: 3.3

cpe:2.3:a:jenkins:findbugs:3.3
Jenkins » Findbugs » Version: 3.4

cpe:2.3:a:jenkins:findbugs:3.4
Jenkins » Findbugs » Version: 3.5

cpe:2.3:a:jenkins:findbugs:3.5
Jenkins » Findbugs » Version: 3.6

cpe:2.3:a:jenkins:findbugs:3.6
Jenkins » Findbugs » Version: 3.7

cpe:2.3:a:jenkins:findbugs:3.7
Jenkins » Findbugs » Version: 3.8

cpe:2.3:a:jenkins:findbugs:3.8
Jenkins » Findbugs » Version: 3.9

cpe:2.3:a:jenkins:findbugs:3.9
Jenkins » Findbugs » Version: 4.0

cpe:2.3:a:jenkins:findbugs:4.0
Jenkins » Findbugs » Version: 4.1

cpe:2.3:a:jenkins:findbugs:4.1
Jenkins » Findbugs » Version: 4.10

cpe:2.3:a:jenkins:findbugs:4.10
Jenkins » Findbugs » Version: 4.11

cpe:2.3:a:jenkins:findbugs:4.11
Jenkins » Findbugs » Version: 4.12

cpe:2.3:a:jenkins:findbugs:4.12
Jenkins » Findbugs » Version: 4.13

cpe:2.3:a:jenkins:findbugs:4.13
Jenkins » Findbugs » Version: 4.14

cpe:2.3:a:jenkins:findbugs:4.14
Jenkins » Findbugs » Version: 4.15

cpe:2.3:a:jenkins:findbugs:4.15
Jenkins » Findbugs » Version: 4.16

cpe:2.3:a:jenkins:findbugs:4.16
Jenkins » Findbugs » Version: 4.17

cpe:2.3:a:jenkins:findbugs:4.17
Jenkins » Findbugs » Version: 4.18

cpe:2.3:a:jenkins:findbugs:4.18
Jenkins » Findbugs » Version: 4.19

cpe:2.3:a:jenkins:findbugs:4.19
Jenkins » Findbugs » Version: 4.2

cpe:2.3:a:jenkins:findbugs:4.2
Jenkins » Findbugs » Version: 4.20

cpe:2.3:a:jenkins:findbugs:4.20
Jenkins » Findbugs » Version: 4.21

cpe:2.3:a:jenkins:findbugs:4.21
Jenkins » Findbugs » Version: 4.22

cpe:2.3:a:jenkins:findbugs:4.22
Jenkins » Findbugs » Version: 4.23

cpe:2.3:a:jenkins:findbugs:4.23
Jenkins » Findbugs » Version: 4.24

cpe:2.3:a:jenkins:findbugs:4.24
Jenkins » Findbugs » Version: 4.25

cpe:2.3:a:jenkins:findbugs:4.25
Jenkins » Findbugs » Version: 4.26

cpe:2.3:a:jenkins:findbugs:4.26
Jenkins » Findbugs » Version: 4.27

cpe:2.3:a:jenkins:findbugs:4.27
Jenkins » Findbugs » Version: 4.28

cpe:2.3:a:jenkins:findbugs:4.28
Jenkins » Findbugs » Version: 4.29

cpe:2.3:a:jenkins:findbugs:4.29
Jenkins » Findbugs » Version: 4.3

cpe:2.3:a:jenkins:findbugs:4.3
Jenkins » Findbugs » Version: 4.30

cpe:2.3:a:jenkins:findbugs:4.30
Jenkins » Findbugs » Version: 4.31

cpe:2.3:a:jenkins:findbugs:4.31
Jenkins » Findbugs » Version: 4.32

cpe:2.3:a:jenkins:findbugs:4.32
Jenkins » Findbugs » Version: 4.33

cpe:2.3:a:jenkins:findbugs:4.33
Jenkins » Findbugs » Version: 4.34

cpe:2.3:a:jenkins:findbugs:4.34
Jenkins » Findbugs » Version: 4.35

cpe:2.3:a:jenkins:findbugs:4.35
Jenkins » Findbugs » Version: 4.36

cpe:2.3:a:jenkins:findbugs:4.36
Jenkins » Findbugs » Version: 4.37

cpe:2.3:a:jenkins:findbugs:4.37
Jenkins » Findbugs » Version: 4.38

cpe:2.3:a:jenkins:findbugs:4.38
Jenkins » Findbugs » Version: 4.39

cpe:2.3:a:jenkins:findbugs:4.39
Jenkins » Findbugs » Version: 4.4

cpe:2.3:a:jenkins:findbugs:4.4
Jenkins » Findbugs » Version: 4.40

cpe:2.3:a:jenkins:findbugs:4.40
Jenkins » Findbugs » Version: 4.41

cpe:2.3:a:jenkins:findbugs:4.41
Jenkins » Findbugs » Version: 4.42

cpe:2.3:a:jenkins:findbugs:4.42
Jenkins » Findbugs » Version: 4.43

cpe:2.3:a:jenkins:findbugs:4.43
Jenkins » Findbugs » Version: 4.44

cpe:2.3:a:jenkins:findbugs:4.44
Jenkins » Findbugs » Version: 4.45

cpe:2.3:a:jenkins:findbugs:4.45
Jenkins » Findbugs » Version: 4.46

cpe:2.3:a:jenkins:findbugs:4.46
Jenkins » Findbugs » Version: 4.47

cpe:2.3:a:jenkins:findbugs:4.47
Jenkins » Findbugs » Version: 4.48

cpe:2.3:a:jenkins:findbugs:4.48
Jenkins » Findbugs » Version: 4.49

cpe:2.3:a:jenkins:findbugs:4.49
Jenkins » Findbugs » Version: 4.5

cpe:2.3:a:jenkins:findbugs:4.5
Jenkins » Findbugs » Version: 4.50

cpe:2.3:a:jenkins:findbugs:4.50
Jenkins » Findbugs » Version: 4.51

cpe:2.3:a:jenkins:findbugs:4.51
Jenkins » Findbugs » Version: 4.52

cpe:2.3:a:jenkins:findbugs:4.52
Jenkins » Findbugs » Version: 4.53

cpe:2.3:a:jenkins:findbugs:4.53
Jenkins » Findbugs » Version: 4.58

cpe:2.3:a:jenkins:findbugs:4.58
Jenkins » Findbugs » Version: 4.59

cpe:2.3:a:jenkins:findbugs:4.59
Jenkins » Findbugs » Version: 4.6

cpe:2.3:a:jenkins:findbugs:4.6
Jenkins » Findbugs » Version: 4.60

cpe:2.3:a:jenkins:findbugs:4.60
Jenkins » Findbugs » Version: 4.61

cpe:2.3:a:jenkins:findbugs:4.61
Jenkins » Findbugs » Version: 4.62

cpe:2.3:a:jenkins:findbugs:4.62
Jenkins » Findbugs » Version: 4.63

cpe:2.3:a:jenkins:findbugs:4.63
Jenkins » Findbugs » Version: 4.64

cpe:2.3:a:jenkins:findbugs:4.64
Jenkins » Findbugs » Version: 4.65

cpe:2.3:a:jenkins:findbugs:4.65
Jenkins » Findbugs » Version: 4.67

cpe:2.3:a:jenkins:findbugs:4.67
Jenkins » Findbugs » Version: 4.68

cpe:2.3:a:jenkins:findbugs:4.68
Jenkins » Findbugs » Version: 4.69

cpe:2.3:a:jenkins:findbugs:4.69
Jenkins » Findbugs » Version: 4.7

cpe:2.3:a:jenkins:findbugs:4.7
Jenkins » Findbugs » Version: 4.70

cpe:2.3:a:jenkins:findbugs:4.70
Jenkins » Findbugs » Version: 4.71

cpe:2.3:a:jenkins:findbugs:4.71
Jenkins » Findbugs » Version: 4.72

cpe:2.3:a:jenkins:findbugs:4.72
Jenkins » Findbugs » Version: 4.73

cpe:2.3:a:jenkins:findbugs:4.73
Jenkins » Findbugs » Version: 4.8

cpe:2.3:a:jenkins:findbugs:4.8
Jenkins » Findbugs » Version: 4.9

cpe:2.3:a:jenkins:findbugs:4.9
Jenkins » Findbugs » Version: 5.0.0

cpe:2.3:a:jenkins:findbugs:5.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2317

Products

Pricing

Contact Us