Vendor
Jenkins vulnerabilities under active attack
6 Jenkins vulnerabilities have confirmed evidence of exploitation in the wild, and 1 is used in ransomware campaigns.
6
confirmed exploited
1
used in ransomware
6
past fix deadline
- CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability Jenkins · Jenkins
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins · Jenkins Command Line Interface (CLI)
- CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability Jenkins · Jenkins User Interface (UI)
- CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins · Script Security Plugin
- CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Jenkins · Matrix Project Plugin
- CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability Jenkins · Jenkins Stapler Web Framework