CVE Database
/

CVE-2022-46684

Back to search

CVE-2022-46684

Published: Dec 7, 2022

Modified: Apr 23, 2025

PUBLISHED

Description

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.

VendorProductVersions

Jenkins Project

Jenkins Checkmarx Plugin

affected
unspecified - <= 2022.3.3

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now