Vendor

    Jenkins Project

    1,598 known vulnerabilities in products by Jenkins Project, 3 of them actively exploited (CISA KEV).

    Key figures

    1,598

    Vulnerabilities

    3

    Actively exploited (KEV)

    1

    Used by ransomware

    72

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Jenkins Project
    SeverityCVETitleCVSSPublished
    CriticalCVE-2024-23897

    Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2019-1003030

    Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

    In CISA KEV

    		9.9
    CriticalCVE-2019-1003029

    Jenkins Script Security Plugin Sandbox Bypass Vulnerability

    In CISA KEV

    		9.9
    CriticalCVE-2024-34144

    Jenkins Script Security Plugin: Code Execution

    		9.8
    HighCVE-2024-23898

    Jenkins: security vulnerability

    		8.8
    HighCVE-2024-43044

    Jenkins: security vulnerability

    		8.8
    HighCVE-2024-54003

    Jenkins Simple Queue Plugin: Cross-Site Scripting (XSS)

    		8.0
    CriticalCVE-2021-21669

    Jenkins Generic Webhook Trigger Plugin: XML External Entity (XXE)

    		9.8
    HighCVE-2023-32986

    Jenkins File Parameter Plugin: security vulnerability

    		8.8
    HighCVE-2019-1003000

    Jenkins project Script Security Plugin: Code Execution

    		8.8
    HighCVE-2019-1003001

    Jenkins project Pipeline: Code Execution

    		8.8
    HighCVE-2019-1003002

    Jenkins project Pipeline: Code Execution

    		8.8
    HighCVE-2019-10392

    Jenkins Git Client Plugin: OS Command Injection

    		8.8
    HighCVE-2019-1003005

    Jenkins Script Security Plugin: Code Execution

    		8.8
    HighCVE-2021-21659

    Jenkins URLTrigger Plugin: XML External Entity (XXE)

    		8.1
    HighCVE-2021-21642

    Jenkins Config File Provider Plugin: XML External Entity (XXE)

    		8.1
    HighCVE-2026-53435

    Jenkins: Deserialization of Untrusted Data

    		8.8
    CriticalCVE-2019-1003031

    Jenkins Matrix Project Plugin: Code Execution

    		9.9
    CriticalCVE-2019-1003041

    Jenkins Pipeline: security vulnerability

    		9.8
    CriticalCVE-2019-1003040

    Jenkins Script Security Plugin: security vulnerability

    		9.8
    MediumCVE-2024-28156

    Jenkins Build Monitor View Plugin: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2020-2096

    Jenkins Gitlab Hook Plugin: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2019-1003034

    Jenkins Job DSL Plugin: Code Execution

    		9.9
    MediumCVE-2020-2140

    Jenkins Audit Trail Plugin: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2022-36883

    Jenkins Git Plugin: security vulnerability

    		7.5

    All vulnerabilities in search

    News

    Products

    Products by Jenkins Project
    ProductCVEsActively exploited
    Jenkins1381
    Jenkins Script Security Plugin391
    Jenkins Active Directory Plugin110
    Jenkins Pipeline: Groovy Plugin111
    Jenkins Email Extension Plugin90
    Jenkins Build Failure Analyzer Plugin80
    Jenkins Gitlab Plugin80
    Jenkins Job Configuration History Plugin80
    Jenkins Ns-nd Integration Performance Publisher Plugin80
    Jenkins Openid Connect Authentication Plugin80
    Jenkins Pipeline: Shared Groovy Libraries Plugin80
    Jenkins Amazon Ec2 Plugin70
    Jenkins Configuration As Code Plugin70
    Jenkins Git Plugin70
    Jenkins Openshift Deployer Plugin70
    Jenkins Rundeck Plugin70
    Jenkins Saml Single Sign On(sso) Plugin70
    Jenkins Xebialabs Xl Deploy Plugin70
    Jenkins Artifactory Plugin60
    Jenkins Azure VM Agents Plugin60
    Jenkins Config File Provider Plugin60
    Jenkins Credentials Binding Plugin60
    Jenkins Deployment Dashboard Plugin60
    Jenkins Electricflow Plugin60
    Jenkins Gitlab Authentication Plugin60
    Jenkins Git Parameter Plugin60
    Jenkins Hashicorp Vault Plugin60
    Jenkins Html Publisher Plugin60
    Jenkins Pipeline Maven Integration Plugin60
    Jenkins Project Inheritance Plugin60
    Jenkins Repository Connector Plugin60
    Jenkins Appspider Plugin50
    Jenkins Aws Codecommit Trigger Plugin50
    Jenkins Azure Ad Plugin50
    Jenkins Blue Ocean Plugin50
    Jenkins Cadence Vmanager Plugin50
    Jenkins Chef Sinatra Plugin50
    Jenkins Delphix Plugin50
    Jenkins Extended Choice Parameter Plugin50
    Jenkins Fortify Plugin50
    Jenkins Git Client Plugin50
    Jenkins Google Compute Engine Plugin50
    Jenkins Job Import Plugin50
    Jenkins Mabl Plugin50
    Jenkins Matrix Project Plugin50
    Jenkins Maven Release Plugin50
    Jenkins Neuvector Vulnerability Scanner Plugin50
    Jenkins Octoperf Load Testing Plugin Plugin50
    Jenkins Openid Plugin50
    Jenkins Publish Over SSH Plugin50
    Jenkins Scriptler Plugin50
    Jenkins Subversion Plugin50
    Jenkins Support Core Plugin50
    Jenkins Websphere Deployer Plugin50
    Jenkins Wso2 Oauth Plugin50
    Jenkins Active Choices Plugin40
    Jenkins Assembla Plugin40
    Jenkins Bitbucket Branch Source Plugin40
    Jenkins Bitbucket Oauth Plugin40
    Jenkins Bitbucket Server Integration Plugin40