CVE-2025-47887
1 advisory.
Maven/org.jenkins-ci.plugins:vmanager-plugin CVE-2025-47887: medium 4.3, EPSS 0.33%
Jenkins Cadence vManager Plugin is Missing Permission Checks
Action: Upgrade org.jenkins-ci.plugins:vmanager-plugin to 4.0.1-288.v8804b_ea_a_cb_7f or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.1-288.v8804b_ea_a_cb_7f | - |
Fixed versions
| 4.0.1-288.v8804b_ea_a_cb_7f |
Sources
- osv: GHSA-rf73-97j8-9vqh
- https://nvd.nist.gov/vuln/detail/CVE-2025-47887
- https://github.com/jenkinsci/vmanager-plugin/pull/25
- https://github.com/jenkinsci/vmanager-plugin
- https://github.com/jenkinsci/vmanager-plugin/releases/tag/4.0.1-288.v8804b_ea_a_cb_7f
- https://www.jenkins.io/security/advisory/2025-05-14/#SECURITY-3548
CVE-2025-47887 · published · modified · JSON