PatchTheCVEmonitoring plugin vulnerabilities and fixes
Recent CVEs affecting monitoring plugin, with upgrade or downgrade steps. 2 tracked.
Also searched as: monitoringplugin.
monitoring plugin has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-10-16. Highest priority: CVE-2014-3679 (score 37/100).
- CVE-2014-3679 MEDIUM 5.0 UPGRADE The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by acc
- CVE-2014-3678 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote atta
FAQ
How do I fix monitoring plugin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is monitoring plugin being exploited right now?
None of the tracked monitoring plugin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which monitoring plugin CVE should I patch first?
CVE-2014-3679 currently ranks highest (37/100): The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by acc.