CVE-2022-45388
Affects plugin: Associated Files Affects plugin: BART Affects plugin: CCCC Affects plugin: CloudBees Docker Hub/Registry Notification Affects plugin: Cluster Statistics Affects plugin: Config Rotator Affects plugin: Delete log Affects plugin: JAPEX Affects plugin: JUnit Affects plugin: loader.io Affects plugin: Naginator Affects plugin: NS-ND Integration Performance Publisher Affects plugin: OSF Builder Suite : : XML Linter Affects plugin: Pipeline Utility Steps Affects plugin: Reverse Proxy Auth Affects plugin: Script Security Affects plugin: SourceMonitor Affects plugin: Support Core Affects plugin: Violations Affects plugin: XP-Dev
CSIRTS triage
- What
- Multiple plugins in Jenkins are affected by various vulnerabilities.
- Who is affected
- Deployments of Jenkins with the affected plugins.
- Urgency
- Remediation is urgent due to the potential for exploitation, although the severity is unknown.
- Action
- Update the affected plugins to their latest versions.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2022-45388
Get an email if CVE-2022-45388 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Moderate exploitation risk1.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 62% of all EPSS-scored CVEs.
Advisory coverage (1)
- unknownJenkins Security Advisory 2022-11-15jenkins · 2022-11-15
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2022-45388)