Health Advisor By Cloudbees Jenkins Health Advisor By Cloudbees

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Jenkins Health Advisor By Cloudbees.

By the Year

In 2025 there have been 1 vulnerability in Jenkins Health Advisor By Cloudbees. Health Advisor By Cloudbees did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2025 as compared to last year.

Year Vulnerabilities Average Score
2025 1 0.00
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 0 0.00
2020 3 5.80
2019 0 0.00
2018 0 0.00

It may take a day or so for new Health Advisor By Cloudbees vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Jenkins Health Advisor By Cloudbees Security Vulnerabilities

Jenkins Health Advisor by CloudBees Plugin 374.v194b_d4f0c8c8 and earlier does not escape responses

CVE-2025-47885 - May 14, 2025

Jenkins Health Advisor by CloudBees Plugin 374.v194b_d4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses.

Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view

CVE-2020-2258 4.3 - Medium - September 16, 2020

Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint.

AuthZ

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier

CVE-2020-2093 8.8 - High - January 15, 2020

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.

Session Riding

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier

CVE-2020-2094 4.3 - Medium - January 15, 2020

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient.

AuthZ

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Jenkins Health Advisor By Cloudbees or by Jenkins? Click the Watch button to subscribe.

Jenkins
Vendor

subscribe