jenkins

1,798 tracked vulnerabilities.

CVE-2018-1000863 HIGH
Jenkins <2.153 - Privilege Escalation
Dec 10, 2018
CVSS 8.2
EPSS 0.07
CVE-2018-1000862 MEDIUM
Jenkins < 2.138.4 - Information Exposure via DirectoryBrowserSupport
Dec 10, 2018
CVSS 4.3
EPSS 0.01
CVE-2018-1000861 CRITICAL KEVNUCLEI
Jenkins < 2.138.3 and < 2.153 - Remote Code Execution via Stapler Framework URL Invocation
Dec 10, 2018
CVSS 9.8
EPSS 0.98
CVE-2018-1999047 MEDIUM
Jenkins <2.137-2.121.2 - Auth Bypass
Aug 23, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1999046 MEDIUM
Jenkins <2.137-2.121.2 - Info Disclosure
Aug 23, 2018
CVSS 4.3
EPSS 0.01
CVE-2018-1999045 MEDIUM
Jenkins <2.137-2.121.2 - Auth Bypass
Aug 23, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-1999044 MEDIUM
Jenkins < 2.138 - Denial of Service via Infinite Loop in CronTab.java
Aug 23, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1999043 HIGH
Jenkins < 2.137 and < 2.121.2 - Denial of Service via Invalid Credential Login Attempts
Aug 23, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-1999042 MEDIUM
Jenkins < 2.137 and < 2.121.2 - Deserialization of Untrusted Data via XStream2.java
Aug 23, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-1999041 MEDIUM
Jenkins Tinfoil Security Plugin <1.6.1 - Info Disclosure
Aug 01, 2018
CVSS 5.5
EPSS 0.00
CVE-2018-1999040 HIGH
Jenkins Kubernetes Plugin <1.10.1 - Info Disclosure
Aug 01, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1999039 MEDIUM
Jenkins Confluence Publisher Plugin <2.0.1 - SSRF
Aug 01, 2018
CVSS 4.3
EPSS 0.01
CVE-2018-1999038 MEDIUM
Jenkins Publisher Over CIFS Plugin <0.10 - Confused Deputy
Aug 01, 2018
CVSS 4.2
EPSS 0.00
CVE-2018-1999037 MEDIUM
Jenkins Resource Disposer Plugin <0.11 - Info Disclosure
Aug 01, 2018
CVSS 4.3
EPSS 0.01
CVE-2018-1999036 MEDIUM
Jenkins SSH Agent Plugin <1.15 - Info Disclosure
Aug 01, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1999035 HIGH
Jenkins Inedo BuildMaster <1.3 - SSRF
Aug 01, 2018
CVSS 7.4
EPSS 0.01
CVE-2018-1999034 HIGH
Jenkins Inedo ProGet Plugin <0.8 - SSRF
Aug 01, 2018
CVSS 7.4
EPSS 0.01
CVE-2018-1999031 MEDIUM
Jenkins meliora-testlab Plugin <1.14 - Info Disclosure
Aug 01, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1999030 MEDIUM
Jenkins Maven Artifact ChoiceListProvider <1.3.1 - Info Disclosure
Aug 01, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-1999029 MEDIUM
Jenkins Shelve Project Plugin <1.5 - XSS
Aug 01, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-1999028 HIGH
Jenkins Accurev Plugin <0.7.16 - Info Disclosure
Aug 01, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1999027 HIGH
Jenkins SaltStack Plugin <3.1.6 - Info Disclosure
Aug 01, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-1999026 MEDIUM
Jenkins TraceTronic ECU-TEST Plugin <2.3 - SSRF
Aug 01, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1999025 HIGH
Jenkins TraceTronic ECU-TEST Plugin <2.3 - SSRF
Aug 01, 2018
CVSS 7.4
EPSS 0.01
CVE-2018-1999007 MEDIUM
Jenkins < 2.121.1 - Cross-Site Scripting via Stapler Debug Mode HTTP 404 Error Page
Jul 23, 2018
CVSS 5.4
EPSS 0.01
Products
jenkins 267 pipeline\ 40 script_security 35 active_directory 12 blue_ocean 11 email_extension 11 git 11 build_failure_analyzer 9 config_file_provider 9 configuration_as_code 9 credentials_binding 8 github_branch_source 8 ns-nd_integration_performance_publisher 8 html_publisher 7 job_configuration_history 7 kubernetes 7 openid_connect_authentication 7 openshift_deployer 7 rundeck 7 subversion 7 amazon_ec2 6 azure_ad 6 azure_vm_agents 6 deployment_dashboard 6 electricflow 6 gerrit_trigger 6 git_client 6 git_parameter 6 github 6 github_pull_request_builder 6
Quick Filters
Critical CVEs With Exploits In CISA KEV