Vendor

    Jenkins Project

    1,880 known vulnerabilities in products by Jenkins Project, 7 of them actively exploited (CISA KEV).

    Key figures

    1,880

    Vulnerabilities

    7

    Actively exploited (KEV)

    1

    Used by ransomware

    81

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Jenkins Project
    SeverityCVETitleCVSSPublished
    CriticalCVE-2024-23897

    Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2019-1003030

    Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

    In CISA KEV

    		9.9
    CriticalCVE-2017-1000353

    Jenkins Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2018-1000861

    Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2019-1003029

    Jenkins Script Security Plugin Sandbox Bypass Vulnerability

    In CISA KEV

    		9.9
    CriticalCVE-2015-5317

    Jenkins User Interface (UI) Information Disclosure Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2024-34144

    Jenkins Script Security Plugin: Code Execution

    		9.8
    CriticalCVE-2016-9299

    Jenkins: Code Execution

    		9.8
    CriticalCVE-2015-8103

    Jenkins: Code Execution

    		9.8
    HighCVE-2024-23898

    Jenkins: security vulnerability

    		8.8
    HighCVE-2024-43044

    Jenkins: security vulnerability

    		8.8
    HighCVE-2024-54003

    Jenkins Simple Queue Plugin: Cross-Site Scripting (XSS)

    		8.0
    CriticalCVE-2021-21669

    Jenkins Generic Webhook Trigger Plugin: XML External Entity (XXE)

    		9.8
    HighCVE-2023-32986

    Jenkins File Parameter Plugin: security vulnerability

    		8.8
    HighCVE-2019-1003000

    Jenkins project Script Security Plugin: Code Execution

    		8.8
    HighCVE-2018-1000600

    Jenkins GitHub: security vulnerability

    		8.8
    HighCVE-2019-1003001

    Jenkins project Pipeline: Code Execution

    		8.8
    HighCVE-2016-0792

    Jenkins: Code Execution

    		8.8
    HighCVE-2019-1003002

    Jenkins project Pipeline: Code Execution

    		8.8
    CriticalCVE-2016-0788

    Jenkins: Code Execution

    		9.8
    HighCVE-2019-10392

    Jenkins Git Client Plugin: OS Command Injection

    		8.8
    HighCVE-2019-1003005

    Jenkins Script Security Plugin: Code Execution

    		8.8
    HighCVE-2018-1999001

    Jenkins: security vulnerability

    		8.8
    HighCVE-2021-21659

    Jenkins URLTrigger Plugin: XML External Entity (XXE)

    		8.1

    All vulnerabilities in search

    News

    Products

    Products by Jenkins Project
    ProductCVEsActively exploited
    Jenkins3115
    Jenkins Script Security Plugin451
    Jenkins Bitbucket Push And Pull Request Plugin410
    Jenkins Gitee Plugin410
    Jenkins Script Security Plugin410
    Pipeline\401
    Jenkins Active Directory Plugin340
    Jenkins Pipeline: Groovy Libraries Plugin330
    Jenkins Lts310
    Jenkins Weekly310
    Jenkins External Workspace Manager230
    Jenkins Hcl Appscan230
    Jenkins Multijob230
    Jenkins Scm-manager230
    Jenkins Webhook Secret Credentials Provider230
    Jenkins Contrast Continuous Application Security Plugin210
    Jenkins Ec2 Fleet Plugin210
    Jenkins External Workspace Manager Plugin210
    Jenkins Git Client Plugin210
    Jenkins Github Branch Source Plugin210
    Jenkins Git Parameter Plugin210
    Jenkins Job Configuration History Plugin210
    Jenkins Mcp Server Plugin210
    Jenkins Pipeline: Groovy Plugin210
    Jenkins Priority Sorter Plugin210
    Jenkins Bitbucket Server Integration Plugin200
    Jenkins Coverage Plugin200
    Jenkins Gitlab Plugin200
    Jenkins Gradle Plugin200
    Jenkins Keycloak Authentication Plugin200
    Jenkins Owasp Dependency-check Plugin200
    Jenkins Pipeline: Multibranch Plugin200
    Jenkins Robot Framework Plugin200
    Jenkins Warnings Plugin200
    Jenkins Appspider Plugin130
    Jenkins Bitbucket Oauth Plugin130
    Jenkins Credentials Binding Plugin130
    Jenkins Email Extension Plugin130
    Jenkins Github Integration Plugin130
    Jenkins Job Import Plugin130
    Jenkins LDAP Plugin130
    Jenkins Multijob Plugin130
    Jenkins Active Directory Plugin120
    Jenkins Aws Codebuild110
    Jenkins Blue Ocean110
    Jenkins Codesonar110
    Jenkins Email Extension Plugin110
    Jenkins Git110
    Jenkins Google Chat Notification110
    Jenkins Horreum110
    Jenkins Ivy Report110
    Jenkins Parameterized Remote Trigger110
    Jenkins Qualys Container Scanning Connector110
    Jenkins Sauce Ondemand110
    Jenkins Violation Comments To Gitlab110
    Jenkins XML Job To Job Ds110
    Build Failure Analyzer90
    Configuration As Code90
    Jenkins Config File Provider90
    Jenkins Credentials Binding Plugin80