CVE security advisories and vulnerability history for script-security-plugin by Jenkins.
45
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
3
Public exploits
PoC or exploit code
7.8
Avg CVSS
2017–2026
Last updated
Overview
Jenkins script-security-plugin has 45 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.
Severity and exploitation
How the CVSS severity of Jenkins script-security-plugin's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical8
High25
Medium12
Low0
In CISA’s Known Exploited Vulnerabilities catalog
1
One of Jenkins script-security-plugin's CVEs is confirmed exploited in the wild.
Public exploits
3
3 of Jenkins script-security-plugin's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Jenkins script-security-plugin version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
script-security-1.045 CVEs
script-security-1.0-beta-145 CVEs
script-security-1.0-beta-245 CVEs
script-security-1.0-beta-345 CVEs
script-security-1.0-beta-445 CVEs
script-security-1.0-beta-545 CVEs
script-security-1.0-beta-645 CVEs
script-security-1.145 CVEs
script-security-1.1045 CVEs
script-security-1.1145 CVEs
script-security-1.12
Common weakness types
The CWE weakness categories most often found in Jenkins script-security-plugin CVEs. Follow any weakness for its full explanation.
Common questions about Jenkins script-security-plugin vulnerabilities.
How many CVEs does Jenkins script-security-plugin have?
Jenkins script-security-plugin has 45 published CVE records since 2017.
How many Jenkins script-security-plugin CVEs are in CISA KEV?
Yes — 1 of Jenkins script-security-plugin's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Jenkins script-security-plugin vulnerabilities?
Yes — 3 of Jenkins script-security-plugin's CVEs have a known public exploit.
Which versions of Jenkins script-security-plugin are affected?
146 distinct Jenkins script-security-plugin versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Jenkins script-security-plugin CVEs?
Jenkins script-security-plugin's CVEs most often map to these CWE weakness types: CWE-693 (Protection Mechanism Failure), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-863 (Incorrect Authorization), CWE-862 (Missing Authorization).
How many critical Jenkins script-security-plugin vulnerabilities are there?
Jenkins script-security-plugin has 8 critical and 25 high-severity CVEs.
What is the average severity of Jenkins script-security-plugin CVEs?
The average CVSS base score across Jenkins script-security-plugin's scored CVEs is 7.8.