The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 03 23 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.596.2Upgrade Jenkins to version 1.606 | Jul 23, 2026 | Oct 16, 2015 |
| Jenkins 2015 03 23_cve 2015 1812 | — | — | Nov 13, 2017 | Oct 16, 2015 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade nodejs-is-equal-shallowUpgrade nodejs-create-error-classUpgrade openshift-origin-brokerUpgrade nodejs-arr-flattenUpgrade nodejs-registry-urlUpgrade nodejs-for-inUpgrade nodejs-lodash.isarrayUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-binary-extensionsUpgrade nodejs-write-file-atomicUpgrade nodejs-lodash.getnativeUpgrade nodejs-splitUpgrade nodejs-lodash.baseassignUpgrade nodejs-is-redirectUpgrade openshift-origin-cartridge-jenkinsUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-pause-streamUpgrade nodejs-lodash.bindcallbackUpgrade origin-kibanaUpgrade openshift-origin-cartridge-rubyUpgrade nodejs-isobjectUpgrade nodejs-is-extglobUpgrade openshift-origin-cartridge-jbosseapUpgrade nodejs-os-homedirUpgrade nodejs-touchUpgrade nodejs-strip-json-commentsUpgrade openshift-origin-cartridge-perlUpgrade rhcUpgrade nodejs-map-streamUpgrade nodejs-regex-cacheUpgrade nodejs-ansi-greenUpgrade nodejs-string-lengthUpgrade nodejs-os-tmpdirUpgrade nodejs-filename-regexUpgrade nodejs-lazy-cacheUpgrade nodejs-capture-stack-traceUpgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-jbossewsUpgrade nodejs-osenvUpgrade nodejs-xdg-basedirUpgrade nodejs-update-notifierUpgrade openshift-origin-cartridge-diyUpgrade nodejs-error-exUpgrade nodejs-readdirpUpgrade openshift-origin-cartridge-pythonUpgrade openshift-ansibleUpgrade nodejs-lodash.restparamUpgrade nodejs-duplexifyUpgrade nodejs-expand-bracketsUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-is-npmUpgrade nodejs-latest-versionUpgrade nodejs-timed-outUpgrade nodejs-lodash.defaultsUpgrade nodejs-array-uniqueUpgrade openshift-origin-cartridge-mockUpgrade nodejs-read-all-streamUpgrade nodejs-is-extendableUpgrade heapsterUpgrade nodejs-is-binary-pathUpgrade nodejs-lowercase-keysUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade nodejs-is-streamUpgrade openshift-origin-broker-utilUpgrade rubygem-openshift-origin-gear-placementUpgrade nodejs-prepend-httpUpgrade nodejs-pinkieUpgrade nodejs-pinkie-promiseUpgrade nodejs-object-assignUpgrade nodejs-mkdirpUpgrade nodejs-es6-promiseUpgrade nodejs-anymatchUpgrade nodejs-slideUpgrade nodejs-lodash.assignUpgrade nodejs-semver-diffUpgrade nodejs-semverUpgrade nodejs-repeat-elementUpgrade nodejs-fromUpgrade nodejs-preserveUpgrade nodejs-lodash.keysUpgrade jenkinsUpgrade nodejs-for-ownUpgrade nodejs-ps-treeUpgrade nodejs-glob-parentUpgrade nodejs-is-dotfileUpgrade nodejs-gotUpgrade nodejs-arrifyUpgrade nss_wrapperUpgrade nodejs-package-jsonUpgrade openshift-origin-cartridge-nodejsUpgrade nodejs-micromatchUpgrade nodejs-ansi-wrapUpgrade nodejs-lodash.createassignerUpgrade nodejs-fill-rangeUpgrade nodejs-nodemonUpgrade nodejs-bracesUpgrade nodejs-expand-rangeUpgrade nodejs-iniUpgrade nodejs-lodash.basecopyUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-optimistUpgrade nodejs-uuidUpgrade nodejs-is-primitiveUpgrade nodejs-success-symbolUpgrade nodejs-stream-combinerUpgrade nodejs-async-eachUpgrade nodejs-is-plain-objUpgrade nodejs-glob-baseUpgrade nodejs-url-parse-laxUpgrade nodejs-configstoreUpgrade openshift-origin-cartridge-phpUpgrade nodejs-chokidarUpgrade nodejs-kind-ofUpgrade nodejs-parse-globUpgrade nodejs-graceful-fsUpgrade nodejs-normalize-pathUpgrade nodejs-is-numberUpgrade nodejs-node-status-codesUpgrade nodejs-throughUpgrade nodejs-undefsafeUpgrade nodejs-end-of-streamUpgrade nodejs-arr-diffUpgrade rubygem-openshift-origin-controllerUpgrade openvswitchUpgrade nodejs-object.omitUpgrade nodejs-parse-jsonUpgrade nodejs-duplexerUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-event-streamUpgrade nodejs-deep-extendUpgrade nodejs-lodash.isargumentsUpgrade nodejs-unzip-responseUpgrade openshift-origin-logshifterUpgrade nodejs-randomaticUpgrade nodejs-rcUpgrade openshift-origin-node-utilUpgrade nodejs-align-textUpgrade nodejs-extglobUpgrade nodejs-is-glob | Jun 18, 2018 | Mar 23, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub