cadence vmanager vulnerabilities and fixes

Recent CVEs affecting cadence vmanager, with upgrade or downgrade steps. 3 tracked.

Also searched as: cadencevmanager.

cadence vmanager has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-05-14. Highest priority: CVE-2025-47887 (score 22/100).

• CVE-2025-47887 MEDIUM 4.3 UPGRADE Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows att
• CVE-2025-47886 MEDIUM 4.3 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_4
• CVE-2025-31724 MEDIUM 4.3 UPGRADE Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencr

FAQ

How do I fix cadence vmanager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cadence vmanager being exploited right now?

None of the tracked cadence vmanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cadence vmanager CVE should I patch first?

CVE-2025-47887 currently ranks highest (22/100): Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows att.

RSS feed for cadence vmanager · ← Back to latest CVEs