CVE-2016-3726
Jenkins affected by Open Redirect Vulnerability
7.4 HighFix available
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
2.31%Up 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
CVE-2016-3726- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
CVE-2016-3726- Updated
- 2026-11-02
EUVDEUVD-2016-4743 No score
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
EUVD-2016-4743- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rx4r-gxpc-h85x
Jenkins affected by Open Redirect Vulnerability
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
GHSA-rx4r-gxpc-h85x- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
OSV
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
CVE-2016-3726- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N - Updated
- 2026-11-02
OSVGHSA-rx4r-gxpc-h85x
Jenkins affected by Open Redirect Vulnerability
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
- Record
GHSA-rx4r-gxpc-h85x- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
OSVRHSA-2016:1773
Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update
- Record
RHSA-2016:1773- CVSS 3.0
- 4.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven |
1.652 up to 2.3 | 2.3 |
org.jenkins-ci.main:jenkins-coreMaven |
before 1.651.2 | 1.651.2 |
org.jenkins-ci.main:jenkins-coreMaven |
1.652 up to 2.3, plus listed versions 1.6531.6541.6551.6561.657 Show 11 moreShow less1.6582.02.0-alpha-12.0-alpha-22.0-alpha-32.0-alpha-42.0-beta-12.0-beta-22.0-rc-12.12.2 |
2.3 |
org.jenkins-ci.main:jenkins-coreMaven |
before 1.651.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 |
1.651.2 |
jenkinsRed Hat:openshift:3.1::el7 |
before 0:1.651.2-1.el7 | 0:1.651.2-1.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.1::el7 |
before 0:1.0.12-1.el7 | 0:1.0.12-1.el7 |
jenkinsRed Hat:openshift:3.2::el7 |
before 0:1.651.2-1.el7 | 0:1.651.2-1.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.2::el7 |
before 0:1.0.12-1.el7 | 0:1.0.12-1.el7 |
rhcRed Hat:openshift:2.0::el6 |
before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
activemqRed Hat:openshift:2.0::el6 |
before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
activemq-clientRed Hat:openshift:2.0::el6 |
before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
openshift-origin-brokerRed Hat:openshift:2.0::el6 |
before 0:1.16.3.2-1.el6op | 0:1.16.3.2-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 |
before 0:1.37.6.2-1.el6op | 0:1.37.6.2-1.el6op |
rubygem-openshift-origin-admin-consoleRed Hat:openshift:2.0::el6 |
before 0:1.28.2.1-1.el6op | 0:1.28.2.1-1.el6op |
rubygem-openshift-origin-controllerRed Hat:openshift:2.0::el6 |
before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
rubygem-openshift-origin-msg-broker-mcollectiveRed Hat:openshift:2.0::el6 |
before 0:1.36.2.4-1.el6op | 0:1.36.2.4-1.el6op |
rubygem-openshift-origin-routing-daemonRed Hat:openshift:2.0::el6 |
before 0:0.26.6.1-1.el6op | 0:0.26.6.1-1.el6op |
openshift-origin-cartridge-jbosseapRed Hat:openshift:2.0::el6 |
before 0:2.27.4.2-1.el6op | 0:2.27.4.2-1.el6op |
ImageMagickRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-debuginfoRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-develRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-docRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-perlRed Hat:openshift:2.0::el6 |
before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
jenkinsRed Hat:openshift:2.0::el6 |
before 0:1.651.2-1.el6op | 0:1.651.2-1.el6op |
libcgroupRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-debuginfoRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-pamRed Hat:openshift:2.0::el6 |
before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
openshift-origin-cartridge-cronRed Hat:openshift:2.0::el6 |
before 0:1.25.4.2-1.el6op | 0:1.25.4.2-1.el6op |
openshift-origin-cartridge-diyRed Hat:openshift:2.0::el6 |
before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-haproxyRed Hat:openshift:2.0::el6 |
before 0:1.31.6.2-1.el6op | 0:1.31.6.2-1.el6op |
openshift-origin-cartridge-jbossewsRed Hat:openshift:2.0::el6 |
before 0:1.35.5.2-1.el6op | 0:1.35.5.2-1.el6op |
openshift-origin-cartridge-jenkinsRed Hat:openshift:2.0::el6 |
before 0:1.29.2.2-1.el6op | 0:1.29.2.2-1.el6op |
openshift-origin-cartridge-jenkins-clientRed Hat:openshift:2.0::el6 |
before 0:1.26.1.1-1.el6op | 0:1.26.1.1-1.el6op |
openshift-origin-cartridge-mongodbRed Hat:openshift:2.0::el6 |
before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-mysqlRed Hat:openshift:2.0::el6 |
before 0:1.31.3.3-1.el6op | 0:1.31.3.3-1.el6op |
openshift-origin-cartridge-nodejsRed Hat:openshift:2.0::el6 |
before 0:1.33.1.2-1.el6op | 0:1.33.1.2-1.el6op |
openshift-origin-cartridge-perlRed Hat:openshift:2.0::el6 |
before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-cartridge-phpRed Hat:openshift:2.0::el6 |
before 0:1.35.4.2-1.el6op | 0:1.35.4.2-1.el6op |
openshift-origin-cartridge-pythonRed Hat:openshift:2.0::el6 |
before 0:1.34.3.2-1.el6op | 0:1.34.3.2-1.el6op |
openshift-origin-cartridge-rubyRed Hat:openshift:2.0::el6 |
before 0:1.32.2.2-1.el6op | 0:1.32.2.2-1.el6op |
openshift-origin-msg-node-mcollectiveRed Hat:openshift:2.0::el6 |
before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-node-proxyRed Hat:openshift:2.0::el6 |
before 0:1.26.3.1-1.el6op | 0:1.26.3.1-1.el6op |
openshift-origin-node-utilRed Hat:openshift:2.0::el6 |
before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
rubygem-openshift-origin-frontend-haproxy-sni-proxyRed Hat:openshift:2.0::el6 |
before 0:0.5.2.1-1.el6op | 0:0.5.2.1-1.el6op |
rubygem-openshift-origin-nodeRed Hat:openshift:2.0::el6 |
before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3726 is a high vulnerability (CVSS 7.4) in Jenkins, published May 17, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.3.
References
cloudbees.com/jenkins-security-advisory-2016-05-11
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
access.redhat.com/errata/RHSA-2016:1206
rhn.redhat.com/errata/RHSA-2016-1773.html
nvd.nist.gov/vuln/detail/CVE-2016-3726
github.com/jenkinsci/jenkins/commit/2ed0c046dfbb2003a17df27c53777e72c6eaff25
Show 76 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1333133
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1206.json
cve.org/CVERecord?id=CVE-2016-3721
foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
This page doesn't list everything
Left out here: 263 versions. The JSON record has them.