Skip to content
THREATWIRE

CVE Tracker · Vendor

Jenkins CVEs

7 CVEs in the tracker, 6 in the CISA KEV catalogue.

All vendors · RSS feed for Jenkins · Tracker data last updated 18 Oct 2026.

Showing 7 of 7

  1. CVE-2024-23897CVSS 9.8 criticalEPSS 100%KEV2024-01-24

    Jenkins Command Line Interface (CLI). Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

  2. CVE-2019-1003000CVSS 8.8 highEPSS 98.4%2019-01-22

    script security. A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkins…

  3. CVE-2018-1000861CVSS 9.8 criticalEPSS 98.3%KEV2018-12-10

    Jenkins Stapler Web Framework. Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

  4. CVE-2017-1000353CVSS 9.8 criticalEPSS 100%KEV2018-01-29

    Jenkins. Jenkins Remote Code Execution Vulnerability

  5. CVE-2019-1003030No CVSSEPSS 97.1%KEV

    Matrix Project Plugin. Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

  6. CVE-2019-1003029No CVSSEPSS 74.4%KEV

    Script Security Plugin. Jenkins Script Security Plugin Sandbox Bypass Vulnerability

  7. CVE-2015-5317No CVSSEPSS 23.0%KEV

    Jenkins User Interface (UI). Jenkins User Interface (UI) Information Disclosure Vulnerability