What is CVE-2015-7536?

CVE-2015-7536 is a medium-severity vulnerability in Jenkins, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2016-02-03.

How severe is CVE-2015-7536?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2015-7536 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Jenkins

CVE-2015-7536

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.013 (66.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Jenkins
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2015-7536?: CVE-2015-7536 is a medium-severity vulnerability in Jenkins, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2016-02-03.
How severe is CVE-2015-7536?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2015-7536 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.