Jenkins vulnerabilities

Products

• Jenkins 295
• Script Security 45
• Pipeline\ 40
• Active Directory 12
• Blue Ocean 11
• Email Extension 11
• Git 11
• Build Failure Analyzer 9
• Config File Provider 9
• Configuration As Code 9
• Credentials Binding 8
• Github Branch Source 8
• Ns-nd Integration Performance Publisher 8
• Html Publisher 7
• Job Configuration History 7
• Kubernetes 7
• Openid 7
• Openid Connect Authentication 7
• Openshift Deployer 7
• Rundeck 7
• Subversion 7
• Amazon Ec2 6
• Azure Ad 6
• Azure Vm Agents 6
• Deployment Dashboard 6
• Electricflow 6
• Gerrit Trigger 6
• Git Client 6
• Github 6
• Github Pull Request Builder 6
• Gitlab 6
• Git Parameter 6
• Google Compute Engine 6
• Hashicorp Vault 6
• Pipeline Maven Integration 6
• Project Inheritance 6
• Repository Connector 6
• Saml Single Sign On 6
• Warnings Next Generation 6
• Xebialabs Xl Deploy 6

Show 160 moreShow less

• Active Choices 5
• Appspider 5
• Assembla 5
• Aws Codecommit Trigger 5
• Cadence Vmanager 5
• Cas 5
• Chef Sinatra 5
• Code Dx 5
• Delphix 5
• Extended Choice Parameter 5
• Fortify 5
• Google Login 5
• Code Dx Plugin 5
• Jira 5
• Job And Node Ownership 5
• Job Import 5
• Junit 5
• Mabl 5
• Mailer 5
• Matrix Project 5
• Mercurial 5
• Neuvector Vulnerability Scanner 5
• Octoperf Load Testing 5
• Promoted Builds 5
• Publish Over Ssh 5
• Scriptler 5
• Support Core 5
• Websphere Deployer 5
• Wso2 Oauth 5
• Ansible 4
• Bitbucket Branch Source 4
• Bitbucket Oauth 4
• Build-publisher 4
• Checkmarx 4
• Compuware Topaz For Total Test 4
• Cons3rt 4
• Continuous Integration With Toad Edge 4
• Convertigo Mobile Platform 4
• Coverity 4
• Credentials 4
• Crx Content Package Deployer 4
• Deployer Framework 4
• Docker 4
• Embeddable Build Status 4
• Fortify On Demand 4
• Gitlab Authentication 4
• Gogs 4
• Health Advisor By Cloudbees 4
• Icescrum 4
• Jira Pipeline Steps 4
• Katalon 4
• Kubernetes Ci 4
• Kubernetes Continuous Deploy 4
• Liquibase Runner 4
• Matlab 4
• Maven 4
• Nexus Platform 4
• Orka By Macstadium 4
• P4 4
• Paaslane Estimate 4
• Proxmox 4
• Rapiddeploy 4
• Report Portal 4
• Requests 4
• Role-based Authorization Strategy 4
• S3 Publisher 4
• Ssh 4
• Static Analysis Utilities 4
• Subversion Partial Release Manager 4
• Team Concert 4
• Team Foundation Server 4
• Vmware Lab Manager Slaves 4
• Warnings 4
• Ansible Tower 3
• Applitools Eyes 3
• Aqua Security Scanner 3
• Audit To Database 3
• Audit Trail 3
• Autocomplete Parameter 3
• Azure Credentials 3
• Beaker Builder 3
• Bitbucket Server Integration 3
• Black Duck Hub 3
• Build-metrics 3
• Cloudbees Aws Credentials 3
• Cloudbees Cd 3
• Code Coverage Api 3
• Conjur Secrets 3
• Contrast Continuous Application Security 3
• Dashboard View 3
• Database 3
• Dbcharts 3
• Dotci 3
• Dynamic Extended Choice Parameter 3
• Dynatrace Application Monitoring 3
• Easyqa 3
• Elastest 3
• Elasticbox Ci 3
• Fitnesse 3
• Flaky Test Handler 3
• Folders 3
• Ftp Publisher 3
• Generic Webhook Trigger 3
• Groovy 3
• Kmap 3
• Libvirt Slaves 3
• Lucene-search 3
• Mac 3
• Matrix Authorization Strategy 3
• Netsparker Cloud Scan 3
• Nomad 3
• Openstack Heat 3
• Owasp Dependency-check 3
• Pipeline Github Notify Step 3
• Publish To Bitbucket 3
• Recipe 3
• Relution Enterprise Appstore Publisher 3
• Reverse Proxy Auth 3
• Rocketchat Notifier 3
• Rqm 3
• Saml 3
• Self-organizing Swarm Modules 3
• Semantic Versioning 3
• Soasta Cloudtest 3
• Storable Configs 3
• Synopsys Coverity 3
• Testcomplete Support 3
• Testlink 3
• Testquality Updater 3
• Tracetronic Ecu-test 3
• Vsphere 3
• Xebialabs Xl Release 3
• Xpath Configuration Viewer 3
• Zephyr Enterprise Test Management 3
• Zephyr For Jira Test Management 3
• 360 Fireline 2
• Agent Server Parameter 2
• Alauda Devops Pipeline 2
• Alauda Kubernetes Support 2
• Anchore Container Image Scanner 2
• Android Lint 2
• Apica Loadtest 2
• Aqua Microscanner 2
• Asakusasatellite 2
• Assembla Auth 2
• Autonomiq 2
• Aws Codedeploy 2
• Azure Key Vault 2
• Azure Service Fabric 2
• Badge 2
• Bearychat 2
• Benchmark Evaluator 2
• Bigpanda Notifier 2
• Bitbucket Push And Pull Request 2
• Buildgraph-view 2
• Build Notifications 2
• Build With Parameters 2
• Bumblebee Hp Alm 2
• Byteguard Build Actions 2
• Cisco Spark 2

Newest

• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction... CVE-2026-117624 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips... CVE-2026-117623 5.4 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing... CVE-2026-117622 6.1 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link... CVE-2026-117621 6.1 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission... CVE-2026-117620 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic... CVE-2026-117619 8.1 HighOctober 28, 2026
• jenkins In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first... CVE-2026-117618 8.1 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an... CVE-2026-117617 8.1 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by... CVE-2026-117616 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the... CVE-2026-117615 6.5 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent... CVE-2026-117614 8.8 HighOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections... CVE-2026-117613 5.4 MediumOctober 28, 2026
• jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to... CVE-2026-117612 8.8 HighOctober 28, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from... CVE-2026-92129 7.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified... CVE-2026-92128 7.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the... CVE-2026-92127 8.0 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder... CVE-2026-92126 8.5 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the ... CVE-2026-92125 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy... CVE-2026-92124 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations... CVE-2026-92123 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called... CVE-2026-92122 8.8 HighSeptember 16, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission... CVE-2026-84659 4.3 MediumSeptember 2, 2026
• jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor`... CVE-2026-84658 4.3 MediumSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the... CVE-2026-84657 Fix available 4.2 MediumSeptember 2, 2026
• jenkins A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers... CVE-2026-84656 Fix available 4.3 MediumSeptember 2, 2026
• jenkins Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing... CVE-2026-84655 Fix available 4.3 MediumSeptember 2, 2026
• jenkins Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does... CVE-2026-84653 Fix available 3.5 LowSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a... CVE-2026-84652 Fix available 7.3 HighSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for... CVE-2026-84651 Fix available 6.3 MediumSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from... CVE-2026-84650 Fix available 8.8 HighSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log... CVE-2026-84648 Fix available 8.8 HighSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field... CVE-2026-84646 Fix available 4.3 MediumSeptember 2, 2026
• jenkins In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their... CVE-2026-84645 Fix available 8.8 HighSeptember 2, 2026
• jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that... CVE-2026-70430 Fix available 2.7 LowAugust 5, 2026
• jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and... CVE-2026-70429 Fix available 6.5 MediumAugust 5, 2026
• jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting... CVE-2026-70428 Fix available 4.3 MediumAugust 5, 2026
• jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with... CVE-2026-70427 Fix available 4.3 MediumAugust 5, 2026
• jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 more Jenkins Zowe zDevOps Plugin has a missing permission check CVE-2026-57307 4.2 MediumJune 24, 2026
• jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 more Jenkins Zowe zDevOps Plugin has a CSRF vulnerability CVE-2026-57306 4.2 MediumJune 24, 2026
• jenkins assembla, jenkins project assembla plugin +1 more Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability CVE-2026-57305 5.4 MediumJune 24, 2026
• jenkins assembla, jenkins project assembla plugin +1 more Jenkins Assembla Plugin has a missing permission check CVE-2026-57304 5.4 MediumJune 24, 2026
• jenkins assembla, jenkins project assembla plugin +1 more Jenkins Assembla Plugin has an XXE vulnerability CVE-2026-57303 7.1 HighJune 24, 2026
• jenkins fitnesse, jenkins project fitnesse plugin +1 more Jenkins FitNesse Plugin stores passwords unencrypted CVE-2026-57302 4.3 MediumJune 24, 2026
• jenkins project owasp zap plugin, jenkins official owasp zap +1 more Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE CVE-2026-57301 8.8 HighJune 24, 2026
• jenkins mcp server, jenkins project mcp server plugin +1 more Jenkins MCP Server Plugin missing a permission check CVE-2026-57300 Fix available 4.3 MediumJune 24, 2026
• jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 more Jenkins Contrast Continuous Application Security Plugin missing permission checks CVE-2026-57299 Fix available 4.3 MediumJune 24, 2026
• jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 more Jenkins Contrast Continuous Application Security Plugin has a missing permission check CVE-2026-57297 Fix available 4.3 MediumJune 24, 2026
• jenkins ec2 fleet, jenkins project ec2 fleet plugin +1 more Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability CVE-2026-57295 Fix available 5.4 MediumJune 24, 2026
• jenkins ec2 fleet, jenkins project ec2 fleet plugin +1 more Jenkins EC2 Fleet Plugin has a missing permission check CVE-2026-57294 Fix available 5.4 MediumJune 24, 2026
• jenkins priority sorter, jenkins project priority sorter plugin +1 more Jenkins Priority Sorter Plugin has a CSRF vulnerability CVE-2026-57290 Fix available 4.3 MediumJune 24, 2026
• Show olderLoading…