How many Jenkins script security CVEs are in CISA KEV?

Yes — 1 of Jenkins script security's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Jenkins script security are affected?

51 distinct Jenkins script security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Jenkins script security CVEs?

Jenkins script security's CVEs most often map to these CWE weakness types: CWE-693 (Protection Mechanism Failure), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-863 (Incorrect Authorization), CWE-862 (Missing Authorization).

How many critical Jenkins script security vulnerabilities are there?

Jenkins script security has 8 critical and 25 high-severity CVEs.

What is the average severity of Jenkins script security CVEs?

The average CVSS base score across Jenkins script security's scored CVEs is 7.8.

Jenkins script security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Jenkins script security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Jenkins script security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Jenkins script security has 45 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

Severity and exploitation

How the CVSS severity of Jenkins script security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High25

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of Jenkins script security's CVEs is confirmed exploited in the wild.

Public exploits

3 of Jenkins script security's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Jenkins script security version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1415.v9a_f9b_3a_c253d8 CVEs
<= 1.624 CVEs
<= 1183.v774b_0b_0a_a_4513 CVEs
<= 1.612 CVEs
<= 1.702 CVEs
<= 1335.vf07d9ce377a_e2 CVEs
<= 1402.v94c9ce4648612 CVEs
<= 1412.v7737b_3405f862 CVEs
< 1172.v35f6a_0b_8207e1 CVE
< 1190.v65867a_a_471261 CVE
< 1229.v4880b_b_e905a_61 CVE

Common weakness types

The CWE weakness categories most often found in Jenkins script security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Jenkins script security CVEs were published each year.

2017

2018

2019

2020

2022

2023

2024

Other Jenkins products

Browse vulnerabilities for other products by Jenkins.

jenkins296 CVEs org.jenkins-ci.main:jenkins-core190 CVEs script-security-plugin45 CVEs Jenkins Script Security Plugin39 CVEs org.jenkins-ci.plugins:script-security21 CVEs pipeline: groovy14 CVEs workflow-cps-plugin14 CVEs

Frequently asked questions

Common questions about Jenkins script security vulnerabilities.

How many CVEs does Jenkins script security have?: Jenkins script security has 45 published CVE records since 2017.
How many Jenkins script security CVEs are in CISA KEV?: Yes — 1 of Jenkins script security's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Jenkins script security vulnerabilities?: Yes — 3 of Jenkins script security's CVEs have a known public exploit.
Which versions of Jenkins script security are affected?: 51 distinct Jenkins script security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Jenkins script security CVEs?: Jenkins script security's CVEs most often map to these CWE weakness types: CWE-693 (Protection Mechanism Failure), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-863 (Incorrect Authorization), CWE-862 (Missing Authorization).
How many critical Jenkins script security vulnerabilities are there?: Jenkins script security has 8 critical and 25 high-severity CVEs.
What is the average severity of Jenkins script security CVEs?: The average CVSS base score across Jenkins script security's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Jenkins script security vulnerabilities

Get an alert for each new Jenkins script security CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Jenkins script security Vulnerabilities