High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-14	CVE-2023-35142	Improper Certificate Validation vulnerability in Jenkins Checkmarx Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default. network high complexity jenkins CWE-295	8.1
2022-02-15	CVE-2022-25200	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Checkmarx A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. network low complexity jenkins CWE-352	8.8