Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins script securityUnsafe methods in the default list of approved signatures in Jenkins Script Security PluginCVE-2017-1000095Fix available6.5 Medium
- jenkins docker commonsJenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDsCVE-2017-1000094Fix available6.5 Medium
- jenkins poll scmJenkins Poll SCM Plugin vulnerable to Cross-Site Request ForgeryCVE-2017-1000093Fix available8.8 High
- jenkins gitCross-Site Request Forgery in Jenkins Git PluginCVE-2017-1000092Fix available7.5 High
- jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request ForgeryCVE-2017-1000091Fix available6.3 Medium
- jenkins role-based authorization strategyCSRF vulnerability in Jenkins Role-based Authorization Strategy Plugin configurationCVE-2017-1000090Fix available8.8 High
- jenkins pipeline\Jenkins Build Step Plugin fails to check Item/Build permissionCVE-2017-1000089Fix available5.3 Medium
- jenkins sidebar linkPersisted XSS Vulnerability in Jenkins Sidebar Link PluginCVE-2017-1000088Fix available5.4 Medium
- jenkins github branch sourceJenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDsCVE-2017-1000087Fix available4.3 Medium
- jenkins periodic backupMissing permission checks in Jenkins Periodic Backup Plugin allow every user to change settingsCVE-2017-1000086Fix available8.0 High
- jenkins subversionJenkins Subversion Plugin Cross-Site Request Forgery vulnerabilityCVE-2017-1000085Fix available6.5 Medium
- jenkins parameterized triggerParameterized Trigger Plugin fails to check Item/Build permissionCVE-2017-1000084Fix available6.5 Medium
- jenkinsJenkins HttpOnly flag not Set for session cookiesCVE-2014-9635Fix available5.3 Medium
- jenkinsJenkins secure flag not set on session cookiesCVE-2014-9634Fix available5.3 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-1000362Fix available9.8 Critical
- jenkins build failure analyzerCross-site Scripting in Jenkins Build Failure Analyzer pluginCVE-2016-4988Fix available6.1 Medium
- jenkins image galleryJenkins Image Gallery Plugin allows Path TraversalCVE-2016-4987Fix available6.5 Medium
- jenkins tapJenkins TAP Plugin allows Path TraversalCVE-2016-4986Fix available7.5 High
- jenkins script securityJenkins Script Security Plugin allows for Bypass of Groovy Sandbox ProtectionCVE-2016-3102Fix available7.3 High
- jenkins extra columnsJenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)CVE-2016-3101Fix available5.4 Medium
- jenkins, fedoraproject fedora +1 moreImproper Neutralization of Special Elements used in an LDAP Query in JenkinsCVE-2016-9299Public exploitFix availableEPSS 96.9%9.8 Critical
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information via API URLCVE-2016-3727Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins affected by Open Redirect VulnerabilityCVE-2016-3726Fix available7.4 High
- jenkins, redhat openshift +1 moreMissing permissions check in Jenkins CoreCVE-2016-3725Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information from Job ConfigurationCVE-2016-3724Fix available6.5 Medium
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-3723Fix available4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2016-3722Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins allows Remote Users to Inject Build ParametersCVE-2016-3721Fix available6.5 Medium
- jenkins, redhat openshift +1 moreJenkins allows Deserialization of Untrusted Data via an XML FileCVE-2016-0792Public exploitFix availableEPSS 83.3%8.8 High
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0791Fix available9.8 Critical
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0790Fix available5.3 Medium
- jenkins, redhat openshift +1 moreJenkins has CRLF Injection Vulnerability in the CLICVE-2016-0789Fix available6.1 Medium
- jenkins, redhat openshift +1 moreJenkins allows Execution of Code by Opening a JRMP ListenerCVE-2016-0788Fix availableEPSS 11.8%9.8 Critical
- jenkins, redhat openshift +1 moreJenkins does not Verify Checksums for Plugin FilesCVE-2015-7539Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7538Fix available8.8 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7537Fix available8.8 High
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2015-7536Fix available5.4 Medium
- jenkins, redhat openshift container platform +1 moreJenkins CLI Deserialization of Untrusted Data vulnerabilityCVE-2015-8103Public exploitFix availableEPSS 91.9%9.8 Critical
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)CVE-2015-5326Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins allows Bypass of Access RestrictionsCVE-2015-5325Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Unauthorized Viewing of Queue API InformationCVE-2015-5324Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows Administrators to Access API TokensCVE-2015-5323Fix available6.5 Medium
- jenkins, redhat openshift +1 moreJenkins has Local File Inclusion VulnerabilityCVE-2015-5322Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins has Information Disclosure via Sidepanel WidgetCVE-2015-5321Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins allows Exposure of Sensitive Information to an Unauthorized ActorCVE-2015-5320Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLICVE-2015-5319Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-5318Fix available6.8 Medium
- jenkins, jenkins user interface (ui), redhat openshift +2 moreJenkins discloses project names via fingerprintsCVE-2015-5317In KEVFix availableEPSS 23.0%5.0 Medium
- jenkinsJenkins improperly ensures trust separationCVE-2014-3665Fix available6.8 Medium
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2015-1814Fix available7.5 High
- Show moreLoading…