Jenkins Project Jenkins Sauce OnDemand Plugin

• CVE-2026-70445 Medium 4.3 Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. 0.3%
• CVE-2022-34197 Unrated Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (X 0.7%