Filter
-Infinity
0

maven/org.jenkins-ci.main:jenkins-coreA flaw was found in Jenkins. Jenkins creates a temporary file when a plugin is uploaded from an admi…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job worksp…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library withou…

7.5
First published (updated )

redhat/jenkinsInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library withou…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary…

First published (updated )

redhat/jenkinsXSS

First published (updated )

maven/org.eclipse.jetty.http2:http2-hpackHTTP/2 HPACK integer overflow and buffer allocation

7.5
First published (updated )

Jenkins LTSJenkins User Interface (UI) Information Disclosure Vulnerability

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTS 2End of life

First published (updated )

Jenkins LTS 2End of life

First published (updated )

Jenkins LTS 2.492End of life

First published (updated )

Jenkins LTSCSRF

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins Command Line Interface (CLI) Path Traversal Vulnerability

EPSS
38.41%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTSJenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not …

8.8
EPSS
0.09%
First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

maven/org.jenkins-ci.main:jenkins-coreIf an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLe…

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreXSS

First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )

Jenkins LTS 2.479Reached end of life

First published (updated )

Jenkins LTS 2.479Reached end of life

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreIn Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDa…

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not ex…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreXSS

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreMalicious File Upload

8.1
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203