Login Request a demo
JP
Vendor
Jenkins Project
123 products with CVEs on record
205
CVEs
2
On KEV
0
New 30D
Products
JS
Jenkins Script Security Plugin
Jenkins project
9.9
19 CVEs1 on KEV0 new
JP
Jenkins Pipeline: Groovy Plugin
Jenkins project
9.9
4 CVEs1 on KEV0 new
JJ
Jenkins Job Import Plugin
Jenkins project
9.1
5 CVEs0 on KEV0 new
JA
Jenkins Active Directory Plugin
Jenkins project
7.4
4 CVEs0 on KEV0 new
JC
Jenkins Compuware Topaz for Total Test Plugin
Jenkins project
7.5
4 CVEs0 on KEV0 new
JC
Jenkins Contrast Continuous Application Security Plugin
Jenkins project
5.4
4 CVEs0 on KEV0 new
JG
Jenkins Gitee Plugin
Jenkins Project
6.8
4 CVEs0 on KEV0 new
JK
Jenkins Katalon Plugin
Jenkins project
8.8
4 CVEs0 on KEV0 new
JP
Jenkins Pipeline: Groovy Libraries Plugin
Jenkins project
9.9
4 CVEs0 on KEV0 new
JA
Jenkins Assembla Plugin
Jenkins Project
7.1
3 CVEs0 on KEV0 new
JA
Jenkins Azure VM Agents Plugin
Jenkins project
6.5
3 CVEs0 on KEV0 new
JG
Jenkins GitLab Plugin
Jenkins project
5.4
3 CVEs0 on KEV0 new
JL
Jenkins LDAP Plugin
Jenkins Project
6.6
3 CVEs0 on KEV0 new
JM
Jenkins Multijob Plugin
Jenkins Project
8.8
3 CVEs0 on KEV0 new
JP
Jenkins Publish to Bitbucket Plugin
Jenkins Project
5.4
3 CVEs0 on KEV0 new
JB
Jenkins Bitbucket Push and Pull Request Plugin
Jenkins Project
6.5
2 CVEs0 on KEV0 new
JB
Jenkins Blue Ocean Plugins
Jenkins project
6.5
2 CVEs0 on KEV0 new
JB
Jenkins ByteGuard Build Actions Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JC
Jenkins Coverage Plugin
Jenkins Project
8.0
2 CVEs0 on KEV0 new
JC
Jenkins Credentials Binding Plugin
Jenkins Project
7.5
2 CVEs0 on KEV0 new
JC
Jenkins Curseforge Publisher Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JE
Jenkins EC2 Fleet Plugin
Jenkins Project
5.4
2 CVEs0 on KEV0 new
JE
Jenkins Email Extension Plugin
Jenkins project
9.9
2 CVEs0 on KEV0 new
JE
Jenkins External Workspace Manager Plugin
Jenkins Project
8.8
2 CVEs0 on KEV0 new
JG
Jenkins Git client Plugin
Jenkins Project
5.0
2 CVEs0 on KEV0 new
JG
Jenkins GitHub Authentication Plugin
Jenkins project
5.9
2 CVEs0 on KEV0 new
JG
Jenkins GitHub Branch Source Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JG
Jenkins Groovy Plugin
Jenkins project
8.8
2 CVEs0 on KEV0 new
JJ
Jenkins Job Configuration History Plugin
Jenkins Project
5.4
2 CVEs0 on KEV0 new
JL
Jenkins LoadNinja Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JM
Jenkins MCP Server Plugin
Jenkins Project
5.4
2 CVEs0 on KEV0 new
JM
Jenkins Microsoft Entra ID (previously Azure AD) Plugin
Jenkins Project
8.8
2 CVEs0 on KEV0 new
JN
Jenkins Nexus Task Runner Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JP
Jenkins Parameterized Remote Trigger Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JP
Jenkins Pipeline: Build Step Plugin
Jenkins Project
5.4
2 CVEs0 on KEV0 new
JS
Jenkins SAML Plugin
Jenkins Project
8.8
2 CVEs0 on KEV0 new
JS
Jenkins SCM-Manager Plugin
Jenkins Project
4.2
2 CVEs0 on KEV0 new
JS
Jenkins Start Windocks Containers Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JT
Jenkins Themis Plugin
Jenkins Project
4.3
2 CVEs0 on KEV0 new
JW
Jenkins Warnings Next Generation Plugin
Jenkins project
8.8
2 CVEs0 on KEV0 new
JW
Jenkins Warnings Plugin
Jenkins project
8.8
2 CVEs0 on KEV0 new
JZ
Jenkins Zowe zDevOps Plugin
Jenkins Project
4.2
2 CVEs0 on KEV0 new
J3
Jenkins 360 FireLine Plugin
Jenkins project
5.3
1 CVEs0 on KEV0 new
JA
Jenkins Allure Plugin
Jenkins Project
8.8
1 CVEs0 on KEV0 new
JA
Jenkins AppSpider Plugin
Jenkins Project
4.3
1 CVEs0 on KEV0 new
JA
Jenkins AWS CodeBuild Plugin
Jenkins Project
4.3
1 CVEs0 on KEV0 new
JA
Jenkins Azure CLI Plugin
Jenkins Project
8.8
1 CVEs0 on KEV0 new
JB
Jenkins Bitbucket OAuth Plugin
Jenkins Project
4.3
1 CVEs0 on KEV0 new
JB
Jenkins Bitbucket Server Integration Plugin
Jenkins Project
4.2
1 CVEs0 on KEV0 new
JB
Jenkins buildgraph-view Plugin
Jenkins Project
5.5
1 CVEs0 on KEV0 new
JC
Jenkins Cloud Foundry Plugin
Jenkins project
8.8
1 CVEs0 on KEV0 new
JC
Jenkins CodeSonar Plugin
Jenkins Project
4.3
1 CVEs0 on KEV0 new
JC
Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
Jenkins project
5.3
1 CVEs0 on KEV0 new
JC
Jenkins Compuware Strobe Measurement Plugin
Jenkins project
4.3
1 CVEs0 on KEV0 new
JC
Jenkins Compuware Topaz Utilities Plugin
Jenkins project
5.3
1 CVEs0 on KEV0 new
JC
Jenkins Compuware Xpediter Code Coverage Plugin
Jenkins project
5.3
1 CVEs0 on KEV0 new
JC
Jenkins Config File Provider Plugin
Jenkins project
4.8
1 CVEs0 on KEV0 new
JC
Jenkins Custom Checkbox Parameter Plugin
Jenkins project
5.4
1 CVEs0 on KEV0 new
JC
Jenkins Customizable Header Plugin
Jenkins Project
8.8
1 CVEs0 on KEV0 new
JE
Jenkins Eggplant Runner Plugin
Jenkins Project
5.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-92141
JK
Jenkins Keycloak Authentication Plugin
Jenkins Project
4.3
0%
Sep 16Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks
CVE-2026-92140
JG
Jenkins Gitee Plugin
Jenkins Project
6.8
0%
Sep 16Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting…
CVE-2026-92139
JB
Jenkins Bitbucket Push and Pull Request Plugin
Jenkins Project
6.5
0%
Sep 16Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials…
CVE-2026-92138
JB
Jenkins Bitbucket Server Integration Plugin
Jenkins Project
4.2
0%
Sep 16The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the…
CVE-2026-92137
JR
Jenkins Robot Framework Plugin
Jenkins Project
8.8
1%
Sep 16Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on…
CVE-2026-92136
JO
Jenkins OWASP Dependency-Check Plugin
Jenkins Project
8.0
0%
Sep 16Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting…
CVE-2026-92135
JC
Jenkins Coverage Plugin
Jenkins Project
8.0
0%
Sep 16Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers…
CVE-2026-92134
JW
Jenkins Warnings Plugin
Jenkins Project
8.0
0%
Sep 16Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitted through the REST API, allowing…
CVE-2026-92133
JG
Jenkins GitLab Plugin
Jenkins Project
5.4
0%
Sep 16Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the…
CVE-2026-92132
JG
Jenkins Gradle Plugin
Jenkins Project
5.4
0%
Sep 16Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is…
CVE-2026-92131
JP
Jenkins Pipeline: Groovy Libraries Plugin
Jenkins Project
4.2
0%
Sep 16Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM…
CVE-2026-92130
JP
Jenkins Pipeline: Multibranch Plugin
Jenkins Project
3.1
0%
Sep 16Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers…
CVE-2026-92129
JS
Jenkins Script Security Plugin
Jenkins Project
7.5
0%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime, allowing attackers…
CVE-2026-92128
JS
Jenkins Script Security Plugin
Jenkins Project
7.5
0%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the…
CVE-2026-92127
JS
Jenkins Script Security Plugin
Jenkins Project
8.0
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer…
CVE-2026-92126
JS
Jenkins Script Security Plugin
Jenkins Project
8.5
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an arbitrary class, allowing attackers…
CVE-2026-92125
JS
Jenkins Script Security Plugin
Jenkins Project
8.8
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attackers with permission to define and run…
CVE-2026-92124
JS
Jenkins Script Security Plugin
Jenkins Project
8.8
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script…
CVE-2026-92123
JS
Jenkins Script Security Plugin
Jenkins Project
8.8
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, property and attribute accesses, and…
CVE-2026-92122
JS
Jenkins Script Security Plugin
Jenkins Project
8.8
1%
Sep 16Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an…
CVE-2026-84677
JU
Jenkins update-center2
Jenkins Project
5.4
0%
Sep 2Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugin download index pages, resulting in a…
CVE-2026-84676
JP
Jenkins Parameterized Remote Trigger Plugin
Jenkins Project
4.3
0%
Sep 2Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…
CVE-2026-84675
JT
Jenkins TICS Plugin
Jenkins Project
7.4
1%
Sep 2OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on…
CVE-2026-84674
JX
Jenkins XebiaLabs XL Deploy Plugin
Jenkins Project
5.4
0%
Sep 2Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored…
CVE-2026-84673
JC
Jenkins Customizable Header Plugin
Jenkins Project
8.8
1%
Sep 2Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to…
CVE-2026-84672
JM
Jenkins Microsoft Entra ID (previously Azure AD) Plugin
Jenkins Project
8.8
0%
Sep 2Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name,…
CVE-2026-84671
JF
Jenkins File Parameter Plugin
Jenkins Project
8.8
1%
Sep 2Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which…
CVE-2026-84670
JP
Jenkins Performance Plugin
Jenkins Project
8.8
1%
Sep 2Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the…
CVE-2026-84669
JA
Jenkins Allure Plugin
Jenkins Project
8.8
1%
Sep 2A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish Allure report results to read arbitrary…
CVE-2026-84668
JS
Jenkins SAML Plugin
Jenkins Project
8.8
0%
Sep 2Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it…
CVE-2026-84667
JT
Jenkins ThinBackup Plugin
Jenkins Project
7.1
0%
Sep 2Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an…
CVE-2026-84666
JJ
Jenkins Job Configuration History Plugin
Jenkins Project
5.4
0%
Sep 2Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing…
CVE-2026-84665
JS
Jenkins SonarQube Scanner Plugin
Jenkins Project
8.0
0%
Sep 2Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:`…
CVE-2026-84664
JG
Jenkins GitLab Plugin
Jenkins Project
5.4
0%
Sep 2Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an…
CVE-2026-84663
JP
Jenkins Pipeline: Groovy Libraries Plugin
Jenkins Project
5.4
0%
Sep 2A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches
CVE-2026-84662
JL
Jenkins LDAP Plugin
Jenkins Project
4.3
0%
Sep 2Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified…
CVE-2026-84661
JP
Jenkins Pipeline: Build Step Plugin
Jenkins Project
5.4
0%
Sep 2A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the…
CVE-2026-84660
JP
Jenkins Pipeline: Build Step Plugin
Jenkins Project
5.4
0%
Sep 2A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be canceled even when…
CVE-2026-84659
JS
Jenkins Script Security Plugin
Jenkins Project
4.3
0%
Sep 2Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the…
CVE-2026-84658
JS
Jenkins Script Security Plugin
Jenkins Project
4.3
0%
Sep 2Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing…
CVE-2026-70448
JI
Jenkins Ivy Report Plugin
Jenkins Project
7.1
0%
Aug 5Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files
CVE-2026-70447
JA
Jenkins AWS CodeBuild Plugin
Jenkins Project
4.3
0%
Aug 5Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in…
CVE-2026-70446
JC
Jenkins CodeSonar Plugin
Jenkins Project
4.3
0%
Aug 5Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
CVE-2026-70445
JS
Jenkins Sauce OnDemand Plugin
Jenkins Project
4.3
0%
Aug 5Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in…
CVE-2026-70444
JV
Jenkins Violation Comments to GitLab Plugin
Jenkins Project
4.3
0%
Aug 5A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of…
CVE-2026-70443
JH
Jenkins Horreum Plugin
Jenkins Project
4.3
0%
Aug 5Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to…
CVE-2026-70442
JG
Jenkins Google Chat Notification Plugin
Jenkins Project
4.3
0%
Aug 5Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure…
CVE-2026-70441
JS
Jenkins Summary Display Plugin
Jenkins Project
5.4
0%
Aug 5Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS)…
CVE-2026-70440
JQ
Jenkins Qualys Container Scanning Connector Plugin
Jenkins Project
5.4
0%
Aug 5Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site…
CVE-2026-70439
JX
Jenkins XML Job to Job DSL Plugin
Jenkins Project
6.5
0%
Aug 5Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality
CVE-2026-70438
JP
Jenkins Parameterized Remote Trigger Plugin
Jenkins Project
4.3
0%
Aug 5A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of…
CVE-2026-70437
JW
Jenkins Webhook Secret Credentials Provider Plugin
Jenkins Project
3.7
0%
Aug 5Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected…
CVE-2026-70436
JE
Jenkins External Workspace Manager Plugin
Jenkins Project
4.3
0%
Aug 5Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing…
CVE-2026-70435
JS
Jenkins SCM-Manager Plugin
Jenkins Project
4.2
0%
Aug 5A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using…
CVE-2026-70434
JS
Jenkins SCM-Manager Plugin
Jenkins Project
4.2
0%
Aug 5A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using…
CVE-2026-70433
JH
Jenkins HCL AppScan Plugin
Jenkins Project
4.3
0%
Aug 5Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in…
CVE-2026-70432
JM
Jenkins Multijob Plugin
Jenkins Project
8.8
0%
Aug 5A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the…
CVE-2026-70431
JM
Jenkins Multijob Plugin
Jenkins Project
8.8
1%
Aug 5Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create…
CVE-2026-70426
RE
Remoting
Jenkins Project
9.0
1%
Aug 5In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied…
CVE-2026-57307
JZ
Jenkins Zowe zDevOps Plugin
Jenkins Project
4.2
0%
Jun 24A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…