https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13472.htmlhttps://patchthecve.com/cve/CVE-2025-13472.htmlSun, 18 Oct 2026 17:10:00 +0000MEDIUM 5.3: A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces and bzm project Ids. Prior to this fix, anyone could see this list as a dropdown on the Jenkins UI.https://patchthecve.com/cve/CVE-2024-3825.htmlhttps://patchthecve.com/cve/CVE-2024-3825.htmlWed, 17 Jun 2026 07:45:11 +0000MEDIUM 4.3: Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration https://patchthecve.com/cve/CVE-2023-6149.htmlhttps://patchthecve.com/cve/CVE-2023-6149.htmlWed, 17 Jun 2026 06:50:09 +0000MEDIUM 5.7: Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize thehttps://patchthecve.com/cve/CVE-2023-6148.htmlhttps://patchthecve.com/cve/CVE-2023-6148.htmlWed, 17 Jun 2026 06:50:09 +0000MEDIUM 5.7: Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure or ehttps://patchthecve.com/cve/CVE-2023-6147.htmlhttps://patchthecve.com/cve/CVE-2023-6147.htmlWed, 17 Jun 2026 06:50:08 +0000MEDIUM 5.7: Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs tohttps://patchthecve.com/cve/CVE-2023-32263.htmlhttps://patchthecve.com/cve/CVE-2023-32263.htmlWed, 17 Jun 2026 05:58:26 +0000LOW 2.6: A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the