Skip to main content
EVULNABLE
Home

Jenkins

CVEs currently on EVULNABLE's Priority Feed for Jenkins, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 6 Jenkins CVEs in EVULNABLE's ranked feed.

#1 94 Immediate CVE-2024-23897 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-08-19

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 88 Immediate CVE-2017-1000353 ExigentKEV since 2025 · listed over a yearCISA KEV Jenkins — Jenkins Remote Code Execution Vulnerability KEV, EPSS 99.7%

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.7% · 99.95th pctlKEV since2025-10-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#3 87 Immediate CVE-2018-1000861 ExigentKEV since 2022 · listed over a yearCISA KEV Jenkins — Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability KEV, EPSS 98.3%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.3% · 99.92nd pctlKEV since2022-02-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.

Full CVE pageNVD ↗CISA KEV ↗
#4 86 Immediate CVE-2019-1003030 ExigentKEV since 2022 · listed over a yearCISA KEV Jenkins — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability KEV, EPSS 97.1%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS97.1% · 99.89th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.

Full CVE pageNVD ↗CISA KEV ↗
#5 80 Urgent CVE-2019-1003029 KEV since 2022 · listed over a yearCISA KEV Jenkins — Jenkins Script Security Plugin Sandbox Bypass Vulnerability KEV, EPSS 74.4%

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS74.4% · 99.49th pctlKEV since2022-04-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.744.

Full CVE pageNVD ↗CISA KEV ↗
#6 75 Urgent CVE-2015-5317 KEV since 2023 · listed over a yearCISA KEV Jenkins — Jenkins User Interface (UI) Information Disclosure Vulnerability KEV, EPSS 23.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS23.0% · 97.7th pctlKEV since2023-05-12

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.230.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗