Job Manager

Job Manager has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2021; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2015 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Authorization Bypass Through User-Controlled Key.

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2015.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all Job Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2015-6668

Job Manager <= 0.7.25 - Insecure Direct Object Reference

Read the full analysis

Vulnerability Records

5 records


2021-10-14 00:00	Job Manager <= 0.7.25 - Authenticated (Admin+) Stored Cross-Site Scripting Job Manager <= 0.7.25	`CVE-2021-39336`	5.5 Medium	Thinkland Security Team	No
2015-08-28 00:00	Job Manager <= 0.7.25 - Insecure Direct Object Reference Job Manager <= 0.7.25	`CVE-2015-6668`	7.5 High	Evangelos Mourikis	No
2015-08-25 00:00	Job Manager <= 0.7.24 - Reflected Cross-Site Scripting Job Manager < 0.7.25	`N/A`	7.1 High	Marcin Probola	Yes
2015-08-04 00:00	Job Manager - < 0.7.23 - Stored Cross-Site Scripting Job Manager < 0.7.23	`CVE-2015-2321`	6.1 Medium	Owais Mehtab	Yes
2012-06-28 00:00	Job Manager <= 0.7.18 - Cross-Site Scripting Job Manager <= 0.7.18	`CVE-2012-6713`	6.1 Medium	devbliss	Yes

Showing 1–5 of 5 reports