Maven org.jenkins-ci.plugins:global-build-stats
productUSpkg:maven/org.jenkins-ci.plugins/global-build-stats
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical0high2medium0low
updated 2026-10-30
01
vulnerabilities (3)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2017-1000389US | medium6.1 | — | ||||
Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained request parameters. These responses had the Content Type: te… | ||||||
| CVE-2022-27207US | medium4.8 | — | ||||
Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page, resulting in a stored cross-site scri… | ||||||
| CVE-2025-58459US | — | — | ||||
Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to en… | ||||||
02
weaknesses (2)
The flaw types (CWEs) most of these CVEs share.
03
sources (1)
Which sources assert this record, and when.
- USOSV.dev3 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan