Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.4Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting…EPSS 0.3%Dec 10, 2025
- Medium5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script genera…EPSS 0.2%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.EPSS 0.2%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attac…EPSS 0.2%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be vi…EPSS 0.2%Dec 10, 2025
- Medium4.3A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.EPSS 0.2%Dec 10, 2025
- High7.5Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenti…EPSS 0.6%Dec 10, 2025
- UnknownJenkins Jenkins Missing AuthorizationKEVOct 17, 2025
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJun 7, 2025
- UnknownJenkins github Exposure of Sensitive Information to an Unauthorized ActorKEVSep 19, 2024
- UnknownPipeline: Groovy Plugin 2.61 and earlier Sandbox BypassKEVApr 15, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityKEVEPSS 100.0%Jan 24, 2024
- UnknownScript Security Plugin Sandboxed Script Execution VulnerabilityKEVJan 31, 2020
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEVEPSS 97.1%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEVEPSS 74.4%Mar 8, 2019
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityKEVEPSS 98.3%Dec 10, 2018
- Critical9.8Jenkins Remote Code Execution VulnerabilityKEVEPSS 99.7%Jan 29, 2018
- UnknownJenkins Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')KEVNov 16, 2016
- High7.5Jenkins User Interface (UI) Information Disclosure VulnerabilityKEVEPSS 23.0%Nov 25, 2015
- UnknownJenkins Cryptographic Key Security BypassKEVMar 14, 2013
45 records · page 2 of 2
PreviousNext