How many Jenkins script security CVEs are in CISA KEV?

Yes — 1 of Jenkins script security's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Jenkins script security are affected?

50 distinct Jenkins script security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Jenkins script security CVEs?

Jenkins script security's CVEs most often map to these CWE weakness types: CWE-693 (Protection Mechanism Failure), CWE-862 (Missing Authorization), CWE-290 (Authentication Bypass by Spoofing), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical Jenkins script security vulnerabilities are there?

Jenkins script security has 8 critical and 17 high-severity CVEs.

What is the average severity of Jenkins script security CVEs?

The average CVSS base score across Jenkins script security's scored CVEs is 7.8.

Jenkins script security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Jenkins script security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Jenkins script security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Jenkins script security has 35 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Jenkins script security, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Jenkins script security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High17

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of Jenkins script security's CVEs is confirmed exploited in the wild.

Public exploits

3 of Jenkins script security's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Jenkins script security version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.624 CVEs
<= 1183.v774b_0b_0a_a_4513 CVEs
<= 1.612 CVEs
<= 1.702 CVEs
<= 1335.vf07d9ce377a_e2 CVEs
<= 1402.v94c9ce4648612 CVEs
< 1172.v35f6a_0b_8207e1 CVE
< 1190.v65867a_a_471261 CVE
< 1229.v4880b_b_e905a_61 CVE
< 1362.1364.v4cf2dc5d87761 CVE
<= 1.361 CVE

Common weakness types

The CWE weakness categories most often found in Jenkins script security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Jenkins script security CVEs were published each year.

2017

2018

2019

2020

2022

2023

2024

Other Jenkins products

Browse vulnerabilities for other products by Jenkins.

jenkins283 CVEs org.jenkins-ci.main:jenkins-core190 CVEs script-security-plugin35 CVEs Jenkins Script Security Plugin29 CVEs org.jenkins-ci.plugins:script-security19 CVEs pipeline: groovy14 CVEs workflow-cps-plugin14 CVEs

Frequently asked questions

Common questions about Jenkins script security vulnerabilities.

How many CVEs does Jenkins script security have?: Jenkins script security has 35 published CVE records since 2017.
How many Jenkins script security CVEs are in CISA KEV?: Yes — 1 of Jenkins script security's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Jenkins script security vulnerabilities?: Yes — 3 of Jenkins script security's CVEs have a known public exploit.
Which versions of Jenkins script security are affected?: 50 distinct Jenkins script security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Jenkins script security CVEs?: Jenkins script security's CVEs most often map to these CWE weakness types: CWE-693 (Protection Mechanism Failure), CWE-862 (Missing Authorization), CWE-290 (Authentication Bypass by Spoofing), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical Jenkins script security vulnerabilities are there?: Jenkins script security has 8 critical and 17 high-severity CVEs.
What is the average severity of Jenkins script security CVEs?: The average CVSS base score across Jenkins script security's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Jenkins script security vulnerabilities

Monitor new Jenkins script security vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Jenkins script security Vulnerabilities