Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Aqua Software Supply Chain Security by Aqua Security

Home
Vendors
Aqua Security
Aqua Software Supply Chain Security

Home
Vendors
Software Supply Chain Security
Aqua Software Supply Chain Security

Aqua Software Supply Chain Security

Supply chainAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 23/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 4 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~114 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Protect every link in the software supply chain.

by Aqua Security · aquasec.com · source ↗

Screenshots

1

Aqua Software Supply Chain Security — screenshot

Known CVEs (4)

CVE-2025-53653 ↗MEDIUM 4.32025
Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Ext…
CVE-2019-10428 ↗HIGH 7.52019
Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
CVE-2019-10397 ↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Software Supply Chain Security products

Apiiro Deliver · Apiiro
Apiiro SSCS · Apiiro
BoostSecurity Cloud-speed Compliance · BoostSecurity
BoostSecurity Software Supply Chain Protection · BoostSecurity
CI/CD Security · Cycode
Chainguard Containers · Chainguard
Chainguard Libraries · Chainguard
Chainguard OS Packages · Chainguard

LOW 3.12019

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

…and 1 more · see all on the vendor page →