JS
Product
Jenkins Script Security Plugin
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 13Medium 4Low 0
Watch
Add Jenkins Script Security Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84659 | 4.3 | Sep 2 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the… Affected: through 1412.v7737b_3405f86 |
| CVE-2026-84658 | 4.3 | Sep 2 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing… Affected: through 1412.v7737b_3405f86 |
| CVE-2026-42519 | 4.3 | Apr 29 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script… Affected: through 1399.ve6a_66547f6e1 |
| CVE-2024-52549 | 4.3 | Nov 13 | Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method… Affected: through 1362.v67dc1f0e1b_b_3; 1365.v4778ca_84b_de5; 1366.vd44b_49a_5c85c through 1367.vdf2fc45f229c |
Showing 4