JE
DevOps
Jenkins
On CISA KEVExploited in the wildRansomware-linked
286
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 22High 62Medium 146Low 5
Watch
Add Jenkins to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1003029 In wildKEV | 9.9 | Mar 8 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2019-1003030 In wildKEV | 9.9 | Mar 8 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-23897 RansomwareIn wildKEV | 9.8 | Jan 24 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Affected: before 2.426.3; before 2.442 |
| CVE-2018-1000861 In wildKEV | 9.8 | Dec 10 | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in… Affected: through 2.138.3; through 2.153 |
| CVE-2017-1000353 In wildKEV | 9.8 | Jan 29 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution Affected: through 2.56; through 2.46.1 |
| CVE-2015-5317 In wildKEV | 7.5 | Nov 25 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request Affected: through 1.637; through 1.625.1 |
Showing 6