Jenkins project vulnerabilities
1,613 published CVEs name Jenkins project among the affected products; CISA lists 3 of them as exploited in the wild.
- 1,613Published CVEs1,613 of them scored
- 162Last 12 monthspublished in the last year
- 71Critical439 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2024-23897
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path…
Jenkins Project · Jenkins
ExploitedCritical9.8 - CVE-2019-1003029
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/Gr…
Jenkins project · Jenkins Script Security Plugin
ExploitedCritical9.9 - CVE-2019-1003030
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml,…
Jenkins project · Jenkins Pipeline: Groovy Plugin
ExploitedCritical9.9