Skip to contentJenkins Pipeline\ vulnerabilities
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of typesCVE-2026-57284Fix available4.3 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has a CSRF vulnerabilityCVE-2026-57283Fix available4.3 Medium
- jenkins project pipeline: groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared librariesCVE-2026-48921Fix available7.5 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 moreRestarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative PluginCVE-2024-52551Fix available8.0 High
- jenkins groovy, jenkins project pipeline: groovy plugin, jenkins pipeline\ +2 moreRebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy PluginCVE-2024-52550Public exploitFix available8.0 High
- jenkins project pipeline: job plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Job Plugin vulnerable to stored Cross-site ScriptingCVE-2023-32977Fix available5.4 Medium
- jenkins project pipeline: build step plugin, jenkins pipeline\ +1 moreCross-site Scripting in Jenkins Pipeline: Build Step PluginCVE-2023-25762Fix availableEPSS 82.1%5.4 Medium
- jenkins project pipeline: supporting apis plugin, jenkins pipeline\ +1 moreStored XSS vulnerability in Jenkins Pipeline: Supporting APIs PluginCVE-2022-43409Fix available5.4 Medium
- jenkins project pipeline: stage view plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in JenkinsCVE-2022-43408Fix available6.5 Medium
- jenkins project pipeline: input step plugin, jenkins pipeline\ +1 moreCSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step PluginCVE-2022-43407Fix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code executionCVE-2022-43402Fix available9.9 Critical
- jenkins project pipeline: input step plugin, jenkins pipeline\ +1 moreArbitrary file write vulnerability in Jenkins Pipeline: Input Step PluginCVE-2022-34177Fix available7.5 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreSandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy PluginCVE-2022-30945Fix available8.5 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreUntrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries PluginCVE-2022-29047Fix available5.3 Medium
- jenkins project pipeline: phoenix autotest plugin, jenkins pipeline\ +1 moreMissing permission Jenkins Pipeline Phoenix AutoTest PluginCVE-2022-281586.5 Medium
- jenkins project pipeline: phoenix autotest plugin, jenkins pipeline\ +1 morePath traversal in Jenkins Pipeline Phoenix AutoTest PluginCVE-2022-281576.5 Medium
- jenkins project pipeline: phoenix autotest plugin, jenkins pipeline\ +1 morePath traversal in Jenkins Phoenix AutoTest PluginCVE-2022-281566.5 Medium
- jenkins project pipeline: phoenix autotest plugin, jenkins pipeline\ +1 moreXML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest PluginCVE-2022-281558.1 High
- jenkins project pipeline: build step plugin, jenkins pipeline\ +1 morePassword parameter default values exposed by Jenkins Pipeline: Build Step PluginCVE-2022-25184Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25183Fix available8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25182Fix available8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism FailureCVE-2022-25181Fix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has Insufficiently Protected CredentialsCVE-2022-25180Fix available4.3 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25178Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25177Fix available6.5 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy PluginCVE-2022-25176Fix available6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2022-25174Public exploitFix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy PluginCVE-2022-25173Public exploitFix available8.8 High
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreLink Following in Jenkins Pipeline Multibranch PluginCVE-2022-25179Fix available6.5 Medium
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Multibranch Plugin vulnerable to OS Command InjectionCVE-2022-25175Public exploitFix available8.8 High
- jenkins project pipeline: aws steps plugin, jenkins pipeline\ +1 moreRCE vulnerability in Jenkins Pipeline: AWS Steps PluginCVE-2020-2166Fix available8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Input Validation in Jenkins Pipeline: Groovy PluginCVE-2020-2109Fix available8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\, redhat openshift container platform +2 moreMissing Authorization in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2019-10357Fix available4.3 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041Fix available9.8 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy PluginCVE-2019-1003030In KEVPublic exploitFix availableEPSS 97.1%9.9 Critical
- jenkins project pipeline: declarative plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Pipeline Declarative Plugin sandbox bypass vulnerabilityCVE-2019-1003002Public exploitFix availableEPSS 81.1%8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Groovy Plugin sandbox bypass vulnerabilityCVE-2019-1003001Public exploitFix availableEPSS 86.1%8.8 High
- jenkins pipeline\, redhat openshift container platform +1 moreJenkins Script Security and Pipeline Groovy Plugins Sandbox BypassCVE-2018-1000866Fix available8.8 High
- jenkins pipeline\Arbitrary code execution due to incomplete sandbox protection in Jenkins PipelineCVE-2017-1000096Fix available8.8 High
- jenkins pipeline\Jenkins Build Step Plugin fails to check Item/Build permissionCVE-2017-1000089Fix available5.3 Medium