Vendor
Jenkins
As of , 6 Jenkins vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2017-1000353.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2017-1000353Remote Code Execution | Jenkins Jenkins | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| 2 | CVE-2024-23897Path Traversal | Jenkins Jenkins Command Line Interface (CLI) | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 3 | CVE-2019-1003029Sandbox Bypass | Jenkins Script Security Plugin | Patch this weekMetasploit module; EPSS 0.74 | 0.74 | ||
| 4 | CVE-2018-1000861Deserialization of Untrusted Data | Jenkins Jenkins Stapler Web Framework | Patch this weekMetasploit module; EPSS 0.98 | 0.98 | ||
| 5 | CVE-2019-1003030Remote Code Execution | Jenkins Matrix Project Plugin | Patch this weekEPSS 0.97 | 0.97 | ||
| 6 | CVE-2015-5317Information Disclosure | Jenkins Jenkins User Interface (UI) | Patch soon | 0.23 |
Products
- Jenkins1 entry
- Jenkins Command Line Interface (CLI)1 entry
- Jenkins Stapler Web Framework1 entry
- Jenkins User Interface (UI)1 entry
- Matrix Project Plugin1 entry
- Script Security Plugin1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 3 |
| 2023 | 1 |
| 2024 | 1 |
| 2025 | 1 |
| 2026 | none |