Jenkins
6 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-23897 |
Jenkins Command Line Interface (CLI) | — | 1.0000 | 2024-08-19 | 2024-09-09 | RW | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability tha |
CVE-2017-1000353 |
Jenkins | — | — | 2025-10-02 | 2025-10-23 | Jenkins contains a remote code execution vulnerability. This vulnerability that | |
CVE-2015-5317 |
Jenkins User Interface (UI) | — | — | 2023-05-12 | 2023-06-02 | Jenkins User Interface (UI) contains an information disclosure vulnerability tha | |
CVE-2019-1003029 |
Script Security Plugin | — | — | 2022-04-25 | 2022-05-16 | Jenkins Script Security Plugin contains a protection mechanism failure, allowing | |
CVE-2019-1003030 |
Matrix Project Plugin | — | — | 2022-03-25 | 2022-04-15 | Jenkins Matrix Project plugin contains a vulnerability which can allow users to | |
CVE-2018-1000861 |
Jenkins Stapler Web Framework | — | — | 2022-02-10 | 2022-08-10 | A code execution vulnerability exists in the Stapler web framework used by Jenki |