[ Vendor · 3 CVEs ]

Jenkins project

CVEs affecting Jenkins project published in the last 30 days, plus any Jenkins project CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2024-23897 24 Jan 2024 CVSS 9.8 Jenkins Command Line Interface (CLI) Path TraversalJenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a… Exploited
CVE-2019-1003029 8 Mar 2019 CVSS 9.9 Jenkins Script Security Plugin Sandbox BypassA sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in… Exploited
CVE-2019-1003030 8 Mar 2019 CVSS 9.9 Jenkins Matrix Project Plugin Remote Code ExecutionA sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml… Exploited