Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerable to XSS through its Build pageCVE-2025-53658Fix available5.4 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability exposes secretsCVE-2025-536574.3 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentialsCVE-2025-536566.5 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin does not mask AWS Secret KeyCVE-2025-536555.3 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret KeyCVE-2025-536546.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokensCVE-2025-536534.3 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter checkCVE-2025-53652Public exploitFix available8.2 High
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin vulnerability displays controller file system information in its logsCVE-2025-53651Fix available6.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreJenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messagesCVE-2025-53650Fix available7.3 High
- jenkins, jenkins openshift-sync-plugin, red hat openshift developer tools and services +2 moreJenkins-image: sensitive data disclosure when using openshift jenkins imageCVE-2024-94536.5 Medium
- jenkins gatling, jenkins project gatling plugin +1 moreJenkins Gatling Plugin Vulnerable to Cross-Site Scripting (XSS)CVE-2025-58068.0 High
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin Fails to Properly Authenticate User CredentialsCVE-2025-478899.8 Critical
- jenkins dingtalk, jenkins project dingtalk plugin +1 moreJenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname ValidationCVE-2025-478885.9 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin is Missing Permission ChecksCVE-2025-47887Fix available4.3 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Vulnerable to Cross-Site Request ForgeryCVE-2025-47886Fix available4.3 Medium
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreJenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site ScriptingCVE-2025-47885Fix available8.8 High
- jenkins openid connect provider, jenkins project openid connect provider plugin +1 moreJenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID TokensCVE-2025-47884Fix available9.1 Critical
- jenkins ssh-slave, jenkins project jenkins/ssh-slave docker images +1 moreIn jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation...CVE-2025-327559.1 Critical
- jenkins ssh-agent, jenkins project jenkins/ssh-agent docker images +1 moreIn jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image...CVE-2025-327549.1 Critical
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration FormCVE-2025-317285.5 Medium
- jenkins asakusasatellite, jenkins project asakusasatellite plugin +1 moreJenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` FilesCVE-2025-317275.5 Medium
- jenkins stack hammer, jenkins project stack hammer plugin +1 moreJenkins Stack Hammer Plugin Stores API Keys Unencrypted in Job `config.xml` FilesCVE-2025-317265.5 Medium
- jenkins monitor-remote-job, jenkins project monitor-remote-job plugin +1 moreJenkins monitor-remote-job Plugin Stores Passwords UnencryptedCVE-2025-317255.5 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys UnencryptedCVE-2025-31724Fix available4.3 Medium
- jenkins simple queue, jenkins project simple queue plugin +1 moreJenkins Simple Queue Plugin Cross-Site Request Forgery (CSRF)CVE-2025-31723Fix available4.3 Medium
- jenkins templating engine, jenkins project templating engine plugin +1 moreJenkins Templating Engine Plugin Vulnerable to Arbitrary Code ExecutionCVE-2025-31722Public exploitFix available8.8 High
- jenkinsJenkins Missing Permission CheckCVE-2025-31721Fix available4.3 Medium
- jenkinsJenkins Missing Permission CheckCVE-2025-31720Fix available4.3 Medium
- jenkins zoho qengine, jenkins project zoho qengine plugin +1 moreJenkins Zoho QEngine Plugin Displays Unmasked API KeysCVE-2025-30197Fix available3.1 Low
- jenkins anchorchain, jenkins project anchorchain plugin +1 moreJenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) VulnerabilityCVE-2025-301966.5 Medium
- jenkinsJenkins Open Redirect vulnerabilityCVE-2025-27625Fix available4.3 Medium
- jenkinsJenkins cross-site request forgery (CSRF) vulnerabilityCVE-2025-27624Fix available5.4 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permissionCVE-2025-27623Fix available4.3 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permissionCVE-2025-27622Fix available4.3 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreMissing permission checks in Jenkins Azure Service Fabric PluginCVE-2025-244034.3 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreCSRF vulnerability in Jenkins Azure Service Fabric PluginCVE-2025-244024.3 Medium
- jenkins folder-based authorization strategy, jenkins project folder-based authorization strategy plugin +1 moreDisabled permissions can be granted by Folder-based in Jenkins Authorization Strategy PluginCVE-2025-244016.8 Medium
- jenkins eiffel broadcaster, jenkins project eiffel broadcaster plugin +1 moreCache confusion in Jenkins Eiffel Broadcaster PluginCVE-2025-24400Fix available4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreImproper handling of case sensitivity in Jenkins OpenId Connect Authentication PluginCVE-2025-24399Fix available8.8 High
- jenkins bitbucket server integration, jenkins project bitbucket server integration plugin +1 moreBitbucket Server Integration Plugin allows bypassing CSRF protection for any URLCVE-2025-24398Fix available8.8 High
- jenkins gitlab, jenkins project gitlab plugin +1 moreIncorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDsCVE-2025-24397Fix available4.3 Medium
- jenkins filesystem list parameter, jenkins project filesystem list parameter plugin +1 moreJenkins Filesystem List Parameter Plugin has Path Traversal vulnerabilityCVE-2024-54004Fix available4.3 Medium
- jenkins simple queue, jenkins project simple queue plugin +1 moreJenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerabilityCVE-2024-54003Fix availableEPSS 81.2%8.0 High
- jenkins shared library version override, jenkins project shared library version override plugin +1 moreScript security bypass vulnerability in Jenkins Shared Library Version Override PluginCVE-2024-52554Fix available8.8 High
- jenkins openid, openid connect authentication, jenkins project openid connect authentication plugin +2 moreSession fixation vulnerability in Jenkins OpenId Connect Authentication PluginCVE-2024-52553Fix available8.8 High
- jenkins authorize project, jenkins project authorize project plugin +1 moreStored XSS vulnerability in Jenkins Authorize Project PluginCVE-2024-52552Fix available8.0 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 moreRestarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative PluginCVE-2024-52551Fix available8.0 High
- jenkins groovy, jenkins project pipeline: groovy plugin, jenkins pipeline\ +2 moreRebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy PluginCVE-2024-52550Public exploitFix available8.0 High
- jenkins script security, jenkins project script security plugin +1 moreMissing permission check in Jenkins Script Security PluginCVE-2024-52549Fix available4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin lacks issuer claim validationCVE-2024-47807Fix available8.1 High
- Show moreLoading…