netVigilance Vulnerability intelligence since 2004

Jenkins

6 Jenkins vulnerabilities with confirmed exploitation in the wild, as published by CISA; 6 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Jenkins
Vulnerability Status
overdue 322d2025-10-23 CVE-2017-1000353 Jenkins / Jenkins Jenkins Remote Code Execution Vulnerability 2025-10-02 9.8 past due
overdue 731d2024-09-09 CVE-2024-23897 Jenkins / Jenkins Command Line Interface (CLI) Jenkins Command Line Interface (CLI) Path Traversal Vulnerability 2024-08-19 9.8 past dueransomware
overdue 1196d2023-06-02 CVE-2015-5317 Jenkins / Jenkins User Interface (UI) Jenkins User Interface (UI) Information Disclosure Vulnerability 2023-05-12 7.5 past due
overdue 1578d2022-05-16 CVE-2019-1003029 Jenkins / Script Security Plugin Jenkins Script Security Plugin Sandbox Bypass Vulnerability 2022-04-25 9.9 past due
overdue 1609d2022-04-15 CVE-2019-1003030 Jenkins / Matrix Project Plugin Jenkins Matrix Project Plugin Remote Code Execution Vulnerability 2022-03-25 9.9 past due
overdue 1492d2022-08-10 CVE-2018-1000861 Jenkins / Jenkins Stapler Web Framework Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability 2022-02-10 9.8 past due