How many Jenkins org.jenkins-ci.main:jenkins-core CVEs are in CISA KEV?

Yes — 3 of Jenkins org.jenkins-ci.main:jenkins-core's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Jenkins org.jenkins-ci.main:jenkins-core are affected?

230 distinct Jenkins org.jenkins-ci.main:jenkins-core versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Jenkins org.jenkins-ci.main:jenkins-core CVEs?

Jenkins org.jenkins-ci.main:jenkins-core's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of Jenkins org.jenkins-ci.main:jenkins-core CVEs?

The average CVSS base score across Jenkins org.jenkins-ci.main:jenkins-core's scored CVEs is 6.2.

Jenkins org.jenkins-ci.main:jenkins-core Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Jenkins org.jenkins-ci.main:jenkins-core vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Jenkins org.jenkins-ci.main:jenkins-core Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Jenkins org.jenkins-ci.main:jenkins-core has 190 published CVE records since 2011, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Jenkins org.jenkins-ci.main:jenkins-core, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Jenkins org.jenkins-ci.main:jenkins-core's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical17

High48

Medium110

Low15

In CISA’s Known Exploited Vulnerabilities catalog

3 of Jenkins org.jenkins-ci.main:jenkins-core's CVEs are confirmed exploited in the wild.

Public exploits

9 of Jenkins org.jenkins-ci.main:jenkins-core's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Jenkins org.jenkins-ci.main:jenkins-core version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.625.214 CVEs
< 2.303.312 CVEs
< 2.32.212 CVEs
2.304 <= v < 2.31912 CVEs
2.34 <= v < 2.4412 CVEs
< 1.532.211 CVEs
1.533 <= v < 1.55111 CVEs
1.626 <= v < 1.63810 CVEs
< 2.263.28 CVEs
2.264 <= v < 2.2758 CVEs
< 2.121.27 CVEs
< 2.204.2

Common weakness types

The CWE weakness categories most often found in Jenkins org.jenkins-ci.main:jenkins-core CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Jenkins org.jenkins-ci.main:jenkins-core CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other Jenkins products

Browse vulnerabilities for other products by Jenkins.

jenkins283 CVEs script security35 CVEs script-security-plugin35 CVEs Jenkins Script Security Plugin29 CVEs org.jenkins-ci.plugins:script-security19 CVEs pipeline: groovy14 CVEs workflow-cps-plugin14 CVEs

Frequently asked questions

Common questions about Jenkins org.jenkins-ci.main:jenkins-core vulnerabilities.

How many CVEs does Jenkins org.jenkins-ci.main:jenkins-core have?: Jenkins org.jenkins-ci.main:jenkins-core has 190 published CVE records since 2011.
How many Jenkins org.jenkins-ci.main:jenkins-core CVEs are in CISA KEV?: Yes — 3 of Jenkins org.jenkins-ci.main:jenkins-core's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Jenkins org.jenkins-ci.main:jenkins-core vulnerabilities?: Yes — 9 of Jenkins org.jenkins-ci.main:jenkins-core's CVEs have a known public exploit.
Which versions of Jenkins org.jenkins-ci.main:jenkins-core are affected?: 230 distinct Jenkins org.jenkins-ci.main:jenkins-core versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Jenkins org.jenkins-ci.main:jenkins-core CVEs?: Jenkins org.jenkins-ci.main:jenkins-core's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical Jenkins org.jenkins-ci.main:jenkins-core vulnerabilities are there?: Jenkins org.jenkins-ci.main:jenkins-core has 17 critical and 48 high-severity CVEs.
What is the average severity of Jenkins org.jenkins-ci.main:jenkins-core CVEs?: The average CVSS base score across Jenkins org.jenkins-ci.main:jenkins-core's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Jenkins org.jenkins-ci.main:jenkins-core vulnerabilities

Monitor new Jenkins org.jenkins-ci.main:jenkins-core vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Jenkins org.jenkins-ci.main:jenkins-core Vulnerabilities