Known Vulnerabilities for Proxmox by Jenkins
Listed below are 4 of the newest known vulnerabilities associated with "Proxmox" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-51083 json | Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users ... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-51082 json | A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before ... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-51081 json | A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PV... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-25199 json | Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants. This issu... | Not Provided | 2026-05-08 | 2026-05-09 |
| CVE-2022-31358 json | A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers t... | Not Provided | 2022-12-14 | 2026-07-05 |
| CVE-2022-28144 json | Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers wi... | 6.5 - MEDIUM | 2022-03-29 | 2023-11-17 |
| CVE-2022-28143 json | A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to ... | 6.5 - MEDIUM | 2022-03-29 | 2023-11-17 |
| CVE-2022-28142 json | Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when... | 7.5 - HIGH | 2022-03-29 | 2023-11-17 |
| CVE-2022-28141 json | Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on ... | 6.5 - MEDIUM | 2022-03-29 | 2023-11-17 |