Where
AND
-Infinity
0

Jenkins Script Security PluginJenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformat…

Risk 33
Severity
7
First published (updated )

jenkins/assembla-pluginSSRF

Risk 50
Severity
7.1
First published (updated )

Jenkins OWASP ZAP PluginJenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rathe…

Risk 82
Severity
8.8
First published (updated )

Jenkins External Workspace Manager PluginPath Traversal

Risk 82
Severity
8.8
First published (updated )

Jenkins Script Security PluginCRLF Injection

Risk 77
Severity
8.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Script Security PluginJenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type c…

Risk 82
Severity
8.8
First published (updated )

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after l…

Risk 33
Severity
7
First published (updated )

Jenkins JenkinsIn Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins …

Risk 33
Severity
7
First published (updated )

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after l…

Risk 44
Severity
7.4
First published (updated )

Jenkins JenkinsIn Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins …

Risk 83
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Credentials Binding PluginInput Validation

Risk 73
Severity
7.5
First published (updated )

Jenkins Pipeline: Groovy Libraries PluginJenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbol…

Risk 73
Severity
7.5
First published (updated )

Jenkins Email Extension JenkinsJenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in …

Risk 82
Severity
8.8
First published (updated )

Jenkins HTML Publisher PluginXSS

Risk 75
Severity
8
First published (updated )

Jenkins Credentials Binding PluginPath Traversal

Risk 73
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsJenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the …

Risk 33
Severity
7
First published (updated )

Jenkins JenkinsJenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) perfo…

Risk 52
Severity
7.5
EPSS
0.05%
First published (updated )

Jenkins JenkinsPath Traversal

Risk 58
Severity
8.8
EPSS
0.12%
First published (updated )

Jenkins JenkinsXSS

Risk 54
Severity
8
EPSS
0.04%
First published (updated )

Jenkins Coverage PluginXSS

Risk 75
Severity
8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsJenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connection…

Risk 46
Severity
7.5
First published (updated )

Jenkins Azure CLI PluginOS Command Injection

Risk 83
Severity
8.8
First published (updated )

Jenkins JDepend PluginXEE

Risk 51
Severity
7.1
First published (updated )

Jenkins SAML PluginJenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing att…

Risk 72
Severity
7.5
First published (updated )

Jenkins Applitools Eyes PluginXSS

Risk 75
Severity
8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Git Parameter PluginInput Validation

Risk 57
Severity
8.2
First published (updated )

Jenkins Credentials Binding PluginJenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., repl…

Risk 54
Severity
7.3
First published (updated )

Jenkins Gatling PluginXSS

Risk 54
Severity
8
EPSS
0.05%
First published (updated )

cloudbees Jenkins Health Advisor by CloudBees PluginXSS

Risk 58
Severity
8.8
EPSS
0.04%
First published (updated )

Jenkins Templating Engine PluginCode Injection

Risk 58
Severity
8.8
EPSS
0.08%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203