https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-43502.htmlhttps://patchthecve.com/cve/CVE-2023-43502.htmlWed, 17 Jun 2026 06:25:37 +0000MEDIUM 4.3: A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes.https://patchthecve.com/cve/CVE-2023-43501.htmlhttps://patchthecve.com/cve/CVE-2023-43501.htmlWed, 17 Jun 2026 06:25:36 +0000MEDIUM 6.5: A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.https://patchthecve.com/cve/CVE-2023-43500.htmlhttps://patchthecve.com/cve/CVE-2023-43500.htmlWed, 17 Jun 2026 06:25:36 +0000HIGH 8.8: A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.https://patchthecve.com/cve/CVE-2023-43499.htmlhttps://patchthecve.com/cve/CVE-2023-43499.htmlWed, 17 Jun 2026 06:25:36 +0000MEDIUM 5.4: Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.https://patchthecve.com/cve/CVE-2020-2244.htmlhttps://patchthecve.com/cve/CVE-2020-2244.htmlWed, 17 Jun 2026 03:12:03 +0000MEDIUM 5.4: Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.https://patchthecve.com/cve/CVE-2019-16555.htmlhttps://patchthecve.com/cve/CVE-2019-16555.htmlWed, 17 Jun 2026 02:22:25 +0000MEDIUM 6.5: A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.https://patchthecve.com/cve/CVE-2019-16554.htmlhttps://patchthecve.com/cve/CVE-2019-16554.htmlWed, 17 Jun 2026 02:22:25 +0000MEDIUM 4.3: A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression.https://patchthecve.com/cve/CVE-2019-16553.htmlhttps://patchthecve.com/cve/CVE-2019-16553.htmlWed, 17 Jun 2026 02:22:25 +0000HIGH 8.8: A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression.https://patchthecve.com/cve/CVE-2016-4988.htmlhttps://patchthecve.com/cve/CVE-2016-4988.htmlWed, 17 Jun 2026 00:48:34 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.https://patchthecve.com/cve/CVE-2013-6374.htmlhttps://patchthecve.com/cve/CVE-2013-6374.htmlWed, 17 Jun 2026 00:00:22 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.