jenkins

1,755 tracked vulnerabilities.

CVE-2025-53653 MEDIUM
Jenkins Aqua Security Scanner Plugin <3.2.8 - Info Disclosure
Jul 09, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-53652 HIGH
Jenkins Git Parameter Plugin <439 - Command Injection
Jul 09, 2025
CVSS 8.2
EPSS 0.00
CVE-2025-53651 MEDIUM
Jenkins HTML Publisher Plugin <425 - Info Disclosure
Jul 09, 2025
CVSS 6.3
EPSS 0.01
CVE-2025-53650 HIGH
Jenkins Credentials Binding Plugin <687.v619cb_15e923f - Info Discl...
Jul 09, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-5806 HIGH
Jenkins Gatling Plugin 136.vb_9009b_3d33a_e - XSS
Jun 06, 2025
CVSS 8.0
EPSS 0.00
CVE-2025-47889 CRITICAL
Jenkins WSO2 Oauth Plugin < 1.0 - Unauthenticated Authentication Bypass
May 14, 2025
CVSS 9.8
EPSS 0.00
CVE-2025-47888 MEDIUM
Jenkins DingTalk Plugin < 2.7.3 - Unauthenticated SSL/TLS Certificate Validation Bypass
May 14, 2025
CVSS 5.9
EPSS 0.00
CVE-2025-47887 MEDIUM
Jenkins Cadence vManager < 4.0.1-286.v9e25a_740b_a_48 - Missing Authorization
May 14, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-47886 MEDIUM
Jenkins Cadence vManager < 4.0.1-286.v9e25a_740b_a_48 - Cross-Site Request Forgery
May 14, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-47885 HIGH
Jenkins Health Advisor by CloudBees < 374.v194b_d4f0c8c8 - Stored Cross-Site Scripting via Server Response
May 14, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-47884 CRITICAL
Jenkins OpenID Connect Provider Plugin < 96.vee8ed882ec4d - Impersonation via Environment Variable Override
May 14, 2025
CVSS 9.1
EPSS 0.01
CVE-2025-32755 CRITICAL
Jenkins/ssh-slave Docker - Privilege Escalation
Apr 10, 2025
CVSS 9.1
EPSS 0.00
CVE-2025-32754 CRITICAL
Jenkins/ssh-agent Docker <6.11.1 - Privilege Escalation
Apr 10, 2025
CVSS 9.1
EPSS 0.00
CVE-2025-31728 MEDIUM
Jenkins AsakusaSatellite Plugin <0.1.1 - Info Disclosure
Apr 02, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-31727 MEDIUM
Jenkins AsakusaSatellite Plugin <0.1.1 - Info Disclosure
Apr 02, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-31726 MEDIUM
Jenkins Stack Hammer Plugin <1.0.6 - Info Disclosure
Apr 02, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-31725 MEDIUM
Jenkins monitor-remote-job Plugin 1.0 - Info Disclosure
Apr 02, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-31724 MEDIUM
Jenkins Cadence vManager Plugin <4.0.0-282.v5096a_c2db_275 - Info D...
Apr 02, 2025
CVSS 4.3
EPSS 0.01
CVE-2025-31723 MEDIUM
Jenkins Simple Queue Plugin <1.4.6 - CSRF
Apr 02, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-31722 HIGH
Jenkins Templating Engine Plugin <2.5.3 - RCE
Apr 02, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-31721 MEDIUM
Jenkins <2.503 - Privilege Escalation
Apr 02, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-31720 MEDIUM
Jenkins <2.503-<2.492.2 - Privilege Escalation
Apr 02, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-30197 LOW
Jenkins Zoho QEngine Plugin <1.0.29 - Info Disclosure
Mar 19, 2025
CVSS 3.1
EPSS 0.00
CVE-2025-30196 MEDIUM
Jenkins AnchorChain Plugin 1.0 - XSS
Mar 19, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-27625 MEDIUM
Jenkins < 2.492.2, < 2.500 - URL Redirection to Untrusted Site via Backslash Character Handling
Mar 05, 2025
CVSS 4.3
EPSS 0.00
Products
jenkins 259 pipeline\ 37 script_security 33 blue_ocean 11 git 11 email_extension 10 active_directory 9 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 ns-nd_integration_performance_publisher 8 credentials_binding 7 github_branch_source 7 html_publisher 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 github 6 github_pull_request_builder 6 gitlab 6 google_compute_engine 6 hashicorp_vault 6
Quick Filters
Critical CVEs With Exploits In CISA KEV