jenkins

1,755 tracked vulnerabilities.

CVE-2019-1003016 HIGH
Jenkins Job Import Plugin <2.1 - Info Disclosure
Feb 06, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-1003015 CRITICAL
Jenkins Job Import Plugin <2.1 - RCE
Feb 06, 2019
CVSS 9.1
EPSS 0.00
CVE-2019-1003014 MEDIUM
Jenkins Config File Provider Plugin <3.4.1 - XSS
Feb 06, 2019
CVSS 4.8
EPSS 0.00
CVE-2019-1003013 MEDIUM
Jenkins Blue Ocean Plugins <1.10.1 - XSS
Feb 06, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-1003012 MEDIUM
Jenkins Blue Ocean Plugins <1.10.1 - RCE
Feb 06, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-1003011 HIGH
Jenkins Token Macro Plugin <2.5 - Info Disclosure & DoS
Feb 06, 2019
CVSS 8.1
EPSS 0.01
CVE-2019-1003010 MEDIUM
Jenkins Git Plugin < 3.9.1 - Cross-Site Request Forgery in GitTagAction
Feb 06, 2019
CVSS 4.3
EPSS 0.01
CVE-2019-1003009 HIGH
Jenkins Active Directory Plugin <2.10 - RCE
Feb 06, 2019
CVSS 7.4
EPSS 0.00
CVE-2019-1003008 HIGH
Jenkins Warnings Next Gen <2.1.1 - CSRF
Feb 06, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-1003007 HIGH
Jenkins Warnings Plugin <5.0.0 - CSRF
Feb 06, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-1003006 HIGH
Jenkins Groovy < 2.0 - Authenticated Remote Code Execution via StringScriptSource
Feb 06, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-1003005 HIGH
Jenkins Script Security Plugin <1.50 - RCE
Feb 06, 2019
CVSS 8.8
EPSS 0.74
CVE-2019-1003004 HIGH
Jenkins <2.158 - Privilege Escalation
Jan 22, 2019
CVSS 7.2
EPSS 0.02
CVE-2019-1003003 HIGH
Jenkins < 2.150.1 and < 2.158 - Improper Authorization via Remember Me Cookie
Jan 22, 2019
CVSS 7.2
EPSS 0.02
CVE-2019-1003002 HIGH
Pipeline: Declarative Plugin <1.3.3 - RCE
Jan 22, 2019
CVSS 8.8
EPSS 0.93
CVE-2019-1003001 HIGH
Pipeline: Groovy Plugin <2.61 - RCE
Jan 22, 2019
CVSS 8.8
EPSS 0.94
CVE-2019-1003000 HIGH NUCLEI
Jenkins Script Security Plugin < 1.50 - Sandbox Bypass Remote Code Execution
Jan 22, 2019
CVSS 8.8
EPSS 0.94
CVE-2018-1000997 MEDIUM
Jenkins < 2.138.1, < 2.145 - Path Traversal in Stapler Web Framework
Jan 23, 2019
CVSS 6.5
EPSS 0.02
CVE-2018-1000426 MEDIUM
Jenkins Git Changelog Plugin <2.6 - XSS
Jan 09, 2019
CVSS 6.1
EPSS 0.00
CVE-2018-1000417 HIGH
Jenkins Email Extension Template Plugin <1.0 - CSRF
Jan 09, 2019
CVSS 8.1
EPSS 0.00
CVE-2018-1000414 HIGH
Jenkins Config File Provider Plugin <3.1 - CSRF
Jan 09, 2019
CVSS 8.1
EPSS 0.00
CVE-2018-1000413 MEDIUM
Jenkins Config File Provider Plugin <3.1 - XSS
Jan 09, 2019
CVSS 5.4
EPSS 0.00
CVE-2018-1000412 HIGH
Jenkins Jira Plugin <3.0.1 - Auth Bypass
Jan 09, 2019
CVSS 8.8
EPSS 0.00
CVE-2018-1000411 MEDIUM
Jenkins JUnit Plugin < 1.25 - Cross-Site Request Forgery in TestObject.java
Jan 09, 2019
CVSS 6.5
EPSS 0.00
CVE-2018-1000410 HIGH
Jenkins < 2.145 and LTS < 2.138.1 - Authenticated Exposure of Sensitive Information via Form Submission Handling
Jan 09, 2019
CVSS 7.8
EPSS 0.00
Products
jenkins 259 pipeline\ 37 script_security 33 blue_ocean 11 git 11 email_extension 10 active_directory 9 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 ns-nd_integration_performance_publisher 8 credentials_binding 7 github_branch_source 7 html_publisher 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 github 6 github_pull_request_builder 6 gitlab 6 google_compute_engine 6 hashicorp_vault 6
Quick Filters
Critical CVEs With Exploits In CISA KEV