CVE-2022-46684

—

CVSS 3.1

5.4 medium

EPSS

<1%p38

Published

Dec 12, 2022 (Dec 12, 2022)

Modified

Jun 17, 2026

Description

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.

Vendors: jenkins
Products: checkmarx
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.