Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-4303

Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2023-4303
  • Jenkins » Fortify » Version: 19.1.28
    cpe:2.3:a:jenkins:fortify:19.1.28
  • Jenkins » Fortify » Version: 19.1.29
    cpe:2.3:a:jenkins:fortify:19.1.29
  • Jenkins » Fortify » Version: 19.2.30
    cpe:2.3:a:jenkins:fortify:19.2.30
  • Jenkins » Fortify » Version: 20.1.32
    cpe:2.3:a:jenkins:fortify:20.1.32
  • Jenkins » Fortify » Version: 20.1.33
    cpe:2.3:a:jenkins:fortify:20.1.33
  • Jenkins » Fortify » Version: 20.2.34
    cpe:2.3:a:jenkins:fortify:20.2.34
  • Jenkins » Fortify » Version: 20.2.35
    cpe:2.3:a:jenkins:fortify:20.2.35
  • Jenkins » Fortify » Version: 21.1.36
    cpe:2.3:a:jenkins:fortify:21.1.36
  • Jenkins » Fortify » Version: 21.1.38
    cpe:2.3:a:jenkins:fortify:21.1.38
  • Jenkins » Fortify » Version: 21.2.37
    cpe:2.3:a:jenkins:fortify:21.2.37


Contact Us

Shodan ® - All rights reserved