CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-43420

Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.061

EPSS Ranking 90.3%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-43420

Jenkins » Contrast Continuous Application Security » Version: N/A

cpe:2.3:a:jenkins:contrast_continuous_application_security:-
Jenkins » Contrast Continuous Application Security » Version: 1.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.1
Jenkins » Contrast Continuous Application Security » Version: 1.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.2
Jenkins » Contrast Continuous Application Security » Version: 1.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.3
Jenkins » Contrast Continuous Application Security » Version: 1.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.4
Jenkins » Contrast Continuous Application Security » Version: 1.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.6
Jenkins » Contrast Continuous Application Security » Version: 2.0

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.0
Jenkins » Contrast Continuous Application Security » Version: 2.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.1
Jenkins » Contrast Continuous Application Security » Version: 2.10

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.10
Jenkins » Contrast Continuous Application Security » Version: 2.11

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.11
Jenkins » Contrast Continuous Application Security » Version: 2.12

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.12
Jenkins » Contrast Continuous Application Security » Version: 2.12.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.12.1
Jenkins » Contrast Continuous Application Security » Version: 2.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.2
Jenkins » Contrast Continuous Application Security » Version: 2.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.3
Jenkins » Contrast Continuous Application Security » Version: 2.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.4
Jenkins » Contrast Continuous Application Security » Version: 2.5

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.5
Jenkins » Contrast Continuous Application Security » Version: 2.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.6
Jenkins » Contrast Continuous Application Security » Version: 2.7

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.7
Jenkins » Contrast Continuous Application Security » Version: 2.8

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.8
Jenkins » Contrast Continuous Application Security » Version: 2.9

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.9
Jenkins » Contrast Continuous Application Security » Version: 3.0

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.0
Jenkins » Contrast Continuous Application Security » Version: 3.0.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.0.1
Jenkins » Contrast Continuous Application Security » Version: 3.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.1
Jenkins » Contrast Continuous Application Security » Version: 3.1.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.1.1
Jenkins » Contrast Continuous Application Security » Version: 3.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.2
Jenkins » Contrast Continuous Application Security » Version: 3.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.3
Jenkins » Contrast Continuous Application Security » Version: 3.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.4
Jenkins » Contrast Continuous Application Security » Version: 3.5

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.5
Jenkins » Contrast Continuous Application Security » Version: 3.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.6
Jenkins » Contrast Continuous Application Security » Version: 3.7

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.7
Jenkins » Contrast Continuous Application Security » Version: 3.8

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8
Jenkins » Contrast Continuous Application Security » Version: 3.8.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.1
Jenkins » Contrast Continuous Application Security » Version: 3.8.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.2
Jenkins » Contrast Continuous Application Security » Version: 3.8.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.3
Jenkins » Contrast Continuous Application Security » Version: 3.9

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-43420

Products

Pricing

Contact Us