CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57297

A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 8.6%

CVSS Severity

CVSS v3 Score 4.3

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3697%20(1)

Products affected by CVE-2026-57297

Jenkins » Contrast Continuous Application Security » Version: N/A

cpe:2.3:a:jenkins:contrast_continuous_application_security:-
Jenkins » Contrast Continuous Application Security » Version: 1.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.1
Jenkins » Contrast Continuous Application Security » Version: 1.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.2
Jenkins » Contrast Continuous Application Security » Version: 1.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.3
Jenkins » Contrast Continuous Application Security » Version: 1.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.4
Jenkins » Contrast Continuous Application Security » Version: 1.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:1.6
Jenkins » Contrast Continuous Application Security » Version: 2.0

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.0
Jenkins » Contrast Continuous Application Security » Version: 2.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.1
Jenkins » Contrast Continuous Application Security » Version: 2.10

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.10
Jenkins » Contrast Continuous Application Security » Version: 2.11

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.11
Jenkins » Contrast Continuous Application Security » Version: 2.12

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.12
Jenkins » Contrast Continuous Application Security » Version: 2.12.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.12.1
Jenkins » Contrast Continuous Application Security » Version: 2.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.2
Jenkins » Contrast Continuous Application Security » Version: 2.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.3
Jenkins » Contrast Continuous Application Security » Version: 2.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.4
Jenkins » Contrast Continuous Application Security » Version: 2.5

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.5
Jenkins » Contrast Continuous Application Security » Version: 2.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.6
Jenkins » Contrast Continuous Application Security » Version: 2.7

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.7
Jenkins » Contrast Continuous Application Security » Version: 2.8

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.8
Jenkins » Contrast Continuous Application Security » Version: 2.9

cpe:2.3:a:jenkins:contrast_continuous_application_security:2.9
Jenkins » Contrast Continuous Application Security » Version: 3.0

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.0
Jenkins » Contrast Continuous Application Security » Version: 3.0.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.0.1
Jenkins » Contrast Continuous Application Security » Version: 3.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.1
Jenkins » Contrast Continuous Application Security » Version: 3.1.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.1.1
Jenkins » Contrast Continuous Application Security » Version: 3.10

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.10
Jenkins » Contrast Continuous Application Security » Version: 3.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.2
Jenkins » Contrast Continuous Application Security » Version: 3.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.3
Jenkins » Contrast Continuous Application Security » Version: 3.4

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.4
Jenkins » Contrast Continuous Application Security » Version: 3.5

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.5
Jenkins » Contrast Continuous Application Security » Version: 3.6

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.6
Jenkins » Contrast Continuous Application Security » Version: 3.7

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.7
Jenkins » Contrast Continuous Application Security » Version: 3.8

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8
Jenkins » Contrast Continuous Application Security » Version: 3.8.1

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.1
Jenkins » Contrast Continuous Application Security » Version: 3.8.2

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.2
Jenkins » Contrast Continuous Application Security » Version: 3.8.3

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.8.3
Jenkins » Contrast Continuous Application Security » Version: 3.9

cpe:2.3:a:jenkins:contrast_continuous_application_security:3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57297

Products

Pricing

Contact Us