target entity

Jenkins

6 source-linked records in the current knowledge graph.

Oct 2, 2025high

CVE-2017-1000353: Jenkins Remote Code Execution Vulnerability

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2017-1000353EPSS 99.7%Jenkins

CISA KEV ↗ · unattributed attribution

Aug 19, 2024high

CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-23897EPSS 100.0%JenkinsJenkins Command Line Interface (CLI)

CISA KEV ↗ · unattributed attribution

May 12, 2023high

CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability

Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages. Required action: Apply updates per vendor instructions.

CVE-2015-5317EPSS 22.4%JenkinsJenkins User Interface (UI)

CISA KEV ↗ · unattributed attribution

Apr 25, 2022high

CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox. Required action: Apply updates per vendor instructions.

CVE-2019-1003029EPSS 73.9%JenkinsScript Security Plugin

CISA KEV ↗ · unattributed attribution

Mar 25, 2022high

CVE-2019-1003030: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution. Required action: Apply updates per vendor instructions.

CVE-2019-1003030EPSS 75.6%JenkinsMatrix Project Plugin

CISA KEV ↗ · unattributed attribution

Feb 10, 2022high

CVE-2018-1000861: Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

A code execution vulnerability exists in the Stapler web framework used by Jenkins Required action: Apply updates per vendor instructions.

CVE-2018-1000861EPSS 98.5%JenkinsJenkins Stapler Web Framework

CISA KEV ↗ · unattributed attribution