Maven org.jenkins-ci.plugins:subversion

Name: Maven org.jenkins-ci.plugins:subversion
Brand: Maven

productUS

pkg:maven/org.jenkins-ci.plugins/subversion

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high6medium1low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-29046US	medium5.4	2.51% (85th)	—	2.15.4	2022-04-12	< 2.15.4
CVE-2021-21698US	high7.5	2.14% (82nd)	—	2.15.1	2021-11-04	< 2.15.1
CVE-2022-29048US	medium4.3	1.88% (79th)	—	2.15.4	2022-04-12	< 2.15.4
CVE-2020-2304US	medium6.5	1.52% (75th)	—	2.13.2	2020-11-04	< 2.13.2
CVE-2017-1000085US	medium6.5	1.03% (64th)	—	2.9	2017-10-05	< 2.9
CVE-2020-2111US	medium5.4	0.92% (60th)	—	2.13.1	2020-02-12	< 2.13.1
CVE-2018-1000111US	medium5.3OT elevated	0.90% (59th)	—	2.10.3	2018-03-13	< 2.10.3
CVE-2013-6372US	low2.1	0.50% (42nd)	—	1.54	2014-05-08	< 1.54

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-255CWE-2551 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.