Skip to contentJenkins Project vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins project ldap pluginJenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL...CVE-2026-846624.3 Medium
- jenkins project pipeline: build step pluginA missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...CVE-2026-846615.4 Medium
- jenkins project pipeline: build step pluginA missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...CVE-2026-846605.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission...CVE-2026-846594.3 Medium
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor`...CVE-2026-846584.3 Medium
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the...CVE-2026-84657Fix available4.2 Medium
- jenkinsA missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers...CVE-2026-84656Fix available4.3 Medium
- jenkinsJenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing...CVE-2026-84655Fix available4.3 Medium
- jenkins project jenkinsIn Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins...CVE-2026-84654Fix available5.4 Medium
- jenkinsJenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does...CVE-2026-84653Fix available3.5 Low
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a...CVE-2026-84652Fix available7.3 High
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for...CVE-2026-84651Fix available6.3 Medium
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from...CVE-2026-84650Fix available8.8 High
- jenkins project jenkinsIn Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093...CVE-2026-84649Fix available8.8 High
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log...CVE-2026-84648Fix available8.8 High
- jenkins project jenkinsIn Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins...CVE-2026-84647Fix available8.8 High
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field...CVE-2026-84646Fix available4.3 Medium
- jenkinsIn Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their...CVE-2026-84645Fix available8.8 High
- jenkins project ivy report pluginJenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML...CVE-2026-704487.1 High
- jenkins project aws codebuild pluginMissing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with...CVE-2026-704474.3 Medium
- jenkins project codesonar pluginMissing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with...CVE-2026-704464.3 Medium
- jenkins project sauce ondemand pluginMissing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with...CVE-2026-704454.3 Medium
- jenkins project violation comments to gitlab pluginA missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier...CVE-2026-704444.3 Medium
- jenkins project horreum pluginJenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate...CVE-2026-704434.3 Medium
- jenkins project google chat notification pluginJenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the...CVE-2026-704424.3 Medium
- jenkins project summary display pluginJenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript...CVE-2026-704415.4 Medium
- jenkins project qualys container scanning connector pluginJenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user...CVE-2026-704405.4 Medium
- jenkins project xml job to job dsl pluginJenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing...CVE-2026-704396.5 Medium
- jenkins project parameterized remote trigger pluginA missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier...CVE-2026-704384.3 Medium
- jenkins project webhook secret credentials provider pluginJenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a...CVE-2026-704373.7 Low
- jenkins project external workspace manager pluginJenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check ...CVE-2026-704364.3 Medium
- jenkins project scm-manager pluginA missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with...CVE-2026-704354.2 Medium
- jenkins project scm-manager pluginA cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and...CVE-2026-704344.2 Medium
- jenkins project hcl appscan pluginMissing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with...CVE-2026-704334.3 Medium
- jenkins project multijob pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0...CVE-2026-704328.8 High
- jenkins project multijob pluginJenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that...CVE-2026-704318.8 High
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that...CVE-2026-70430Fix available2.7 Low
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and...CVE-2026-70429Fix available6.5 Medium
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting...CVE-2026-70428Fix available4.3 Medium
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with...CVE-2026-70427Fix available4.3 Medium
- jenkins project jenkins, remoting +1 moreIn Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2...CVE-2026-70426Fix available9.0 Critical
- jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 moreJenkins Zowe zDevOps Plugin has a missing permission checkCVE-2026-573074.2 Medium
- jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 moreJenkins Zowe zDevOps Plugin has a CSRF vulnerabilityCVE-2026-573064.2 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerabilityCVE-2026-573055.4 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has a missing permission checkCVE-2026-573045.4 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has an XXE vulnerabilityCVE-2026-573037.1 High
- jenkins fitnesse, jenkins project fitnesse plugin +1 moreJenkins FitNesse Plugin stores passwords unencryptedCVE-2026-573024.3 Medium
- jenkins project owasp zap plugin, jenkins official owasp zap +1 moreJenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCECVE-2026-573018.8 High
- jenkins mcp server, jenkins project mcp server plugin +1 moreJenkins MCP Server Plugin missing a permission checkCVE-2026-57300Fix available4.3 Medium
- jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 moreJenkins Contrast Continuous Application Security Plugin missing permission checksCVE-2026-57299Fix available4.3 Medium
- Show moreLoading…