JE
DevOps
Jenkins
On CISA KEVExploited in the wildRansomware-linked
302
CVEs
6
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 22High 62Medium 147Low 5
Watch
Add Jenkins to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1003049 | 8.1 | Apr 10 | Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins… Affected: through 2.164.1; through 2.171 |
| CVE-2018-1000194 | 8.1 | Jun 5 | A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write… Affected: through 2.120; through 2.107.2 |
| CVE-2017-1000504 | 8.1 | Jan 24 | A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization Affected: through 2.89.1; through 2.94 |
| CVE-2017-1000503 | 8.1 | Jan 24 | A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization Affected: 2.81 through 2.94; 2.89.1 |
| CVE-2026-27099 | 8.0 | Feb 18 | Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline… Affected: 2.483 before 2.551; 2.492.1 before 2.541.2 |
| CVE-2023-35141 | 8.0 | Jun 14 | In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actions Affected: before 2.400; before 2.401.1 |
| CVE-2021-21605 | 8.0 | Jan 13 | Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file Affected: through 2.263.1; through 2.274 |
| CVE-2021-21604 | 8.0 | Jan 13 | Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that… Affected: through 2.263.1; through 2.274 |
| CVE-2018-1000410 | 7.8 | Jan 9 | An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in… Affected: through 2.138.1; through 2.145 |
| CVE-2026-33002 | 7.5 | Mar 18 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by… Affected: 2.426.3 before 2.541.3; 2.442 before 2.555 |
| CVE-2025-67635 | 7.5 | Dec 10 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated… Affected: before 2.528.3; before 2.541 |
| CVE-2023-36478 | 7.5 | Oct 10 | Eclipse Jetty provides a web server and servlet container Affected: before 2.414.3; before 2.428 |
| CVE-2023-27901 | 7.5 | Mar 10 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5… Affected: before 2.375.4; before 2.394 |
| CVE-2023-27900 | 7.5 | Mar 10 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5… Affected: before 2.375.4; before 2.394 |
| CVE-2022-2048 | 7.5 | Jul 7 | In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active… Affected: before 2.263; before 2.361.1 |
| CVE-2022-34175 | 7.5 | Jun 23 | Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive… Affected: 2.335 through 2.355 |
| CVE-2022-34174 | 7.5 | Jun 23 | In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username,… Affected: through 2.332.3; through 2.355 |
| CVE-2022-0538 | 7.5 | Feb 9 | Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and… Affected: before 2.319.3; before 2.334 |
| CVE-2021-43859 | 7.5 | Feb 1 | XStream is an open source java library to serialize objects to XML and back again Affected: before 2.319.3; 2.321 before 2.334 |
| CVE-2021-21688 | 7.5 | Nov 4 | The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have… Affected: before 2.303.3; before 2.319 |
| CVE-2021-21671 | 7.5 | Jun 30 | Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login Affected: 2.266 before 2.300; 2.277.1 before 2.289.2 |
| CVE-2021-28165 | 7.5 | Apr 1 | In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame Affected: before 2.277.3; before 2.286 |
| CVE-2012-0785 | 7.5 | Feb 24 | Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11… Affected: before 1.424.2; before 1.447 |
| CVE-2019-10353 | 7.5 | Jul 17 | CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection Affected: through 2.176.1; through 2.185 |
| CVE-2018-1999043 | 7.5 | Aug 23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows… Affected: through 2.121.2; through 2.137 |
| CVE-2018-1999002 | 7.5 | Jul 23 | A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers… Affected: through 2.121.1; 2.122 through 2.132 |
| CVE-2017-1000394 | 7.5 | Jan 26 | Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092 Affected: through 2.73.1; through 2.83 |
| CVE-2015-7539 | 7.5 | Feb 3 | The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for… Affected: through 1.639; through 1.625.1 |
| CVE-2016-3726 | 7.4 | May 17 | Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Affected: through 1.651.1; through 2.2 |
| CVE-2026-84652 | 7.3 | Sep 2 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me" cookie, allowing attackers able to… Affected: before 2.568.3; before 2.580 |
| CVE-2017-1000391 | 7.3 | Jan 26 | Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in… Affected: through 2.73.2; through 2.88 |
| CVE-2019-1003004 | 7.2 | Jan 22 | An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java… Affected: 2.158 and earlier, LTS 2.150.1 and earlier |
| CVE-2019-1003003 | 7.2 | Jan 22 | An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that… Affected: 2.158 and earlier, LTS 2.150.1 and earlier |
| CVE-2023-27899 | 7.0 | Mar 10 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading… Affected: before 2.375.4; before 2.394 |
| CVE-2024-34148 | 6.8 | May 2 | Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by… Affected: 1.0.1* through 1.0.1 |
| CVE-2026-70429 | 6.5 | Aug 5 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups… Affected: before 2.568.2; before 2.576 |
| CVE-2024-9453 | 6.5 | Jul 4 | Jenkins-image: sensitive data disclosure when using openshift jenkins image Affected: before 1.1.0.818.v3883b_3b_df89a_ |
| CVE-2021-21683 | 6.5 | Oct 6 | The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability… Affected: through 2.303.1; through 2.314 |
| CVE-2021-21607 | 6.5 | Jan 13 | Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use… Affected: through 2.263.1; through 2.274 |
| CVE-2021-21602 | 6.5 | Jan 13 | Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks Affected: through 2.263.1; through 2.274 |
| CVE-2019-10352 | 6.5 | Jul 17 | A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with… Affected: through 2.176.1; through 2.185 |
| CVE-2018-1000997 | 6.5 | Jan 23 | A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler/Facet.java,… Affected: through 2.138.1; through 2.145 |
| CVE-2018-1000408 | 6.5 | Jan 9 | A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows… Affected: through 2.138.1; through 2.145 |
| CVE-2018-1000406 | 6.5 | Jan 9 | A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with… Affected: through 2.138.1; through 2.145 |
| CVE-2018-1000864 | 6.5 | Dec 10 | A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request… Affected: through 2.138.3; through 2.153 |
| CVE-2018-1999047 | 6.5 | Aug 23 | A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled… Affected: through 2.121.2; through 2.137 |
| CVE-2018-1999044 | 6.5 | Aug 23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request… Affected: through 2.121.2; through 2.137 |
| CVE-2018-6356 | 6.5 | Feb 20 | Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files Affected: before 2.107; before 2.89.4 |
| CVE-2017-1000355 | 6.5 | Jan 29 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void Affected: through 2.56; through 2.46.1 |
| CVE-2016-3724 | 6.5 | May 17 | Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration Affected: through 1.649; through 1.651.1 |