CVE-2023-3442

HighCVSS 7.7

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

Risk Assessment

The organization may be exposed to data leaks, which could lead to serious legal and reputational consequences.

Recommendation

It is recommended to apply version 1.38.1 of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server to address this issue.

Other vulnerabilities in Jenkins Plug-in for ServiceNow DevOps

CVE-2023-3414Medium
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information.

Original NVD description (English source)

A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS