Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Jenkins project — Vulnerabilities & Security Advisories 1598

Browse all 1598 CVE security advisories affecting Jenkins project. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Jenkins is an open-source automation server primarily used for continuous integration and continuous delivery (CI/CD) pipelines. As a widely adopted tool in software development, it facilitates the building, testing, and deployment of code. Historically, the platform has been susceptible to numerous security flaws, with over 1,400 Common Vulnerabilities and Exposures (CVEs) recorded. These vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, often stemming from insecure default configurations or improper input validation. A notable incident occurred in 2019 when a critical RCE flaw allowed attackers to execute arbitrary commands on build agents. The Jenkins project has since implemented stricter security defaults and improved access controls to mitigate these risks. Despite these efforts, the sheer volume of historical CVEs highlights the complexity of securing a long-standing, feature-rich automation ecosystem, requiring diligent maintenance and configuration management by administrators to ensure robust protection against potential exploits.

Top products by Jenkins project: Jenkins Jenkins Script Security Plugin Jenkins Pipeline: Groovy Plugin Jenkins Active Directory Plugin Jenkins Email Extension Plugin Jenkins Job Configuration History Plugin Jenkins GitLab Plugin Jenkins Pipeline: Shared Groovy Libraries Plugin Jenkins OpenId Connect Authentication Plugin Jenkins NS-ND Integration Performance Publisher Plugin Jenkins Build Failure Analyzer Plugin Jenkins OpenShift Deployer Plugin Jenkins XebiaLabs XL Deploy Plugin Jenkins SAML Single Sign On(SSO) Plugin Jenkins Configuration as Code Plugin Jenkins Git Plugin Jenkins Amazon EC2 Plugin Jenkins Rundeck Plugin Jenkins Azure VM Agents Plugin Jenkins Deployment Dashboard Plugin Jenkins Artifactory Plugin Jenkins Pipeline Maven Integration Plugin Jenkins ElectricFlow Plugin Jenkins Gitlab Authentication Plugin Jenkins Project Inheritance Plugin Jenkins HTML Publisher Plugin Jenkins Repository Connector Plugin Jenkins Config File Provider Plugin Jenkins HashiCorp Vault Plugin Jenkins Git Parameter Plugin
CVE ID Title CVSS Severity Published
CVE-2024-52551 Jenkins plugin Pipeline:Declarative 安全漏洞 — Jenkins Pipeline: Declarative Plugin 6.5AI Medium AI 2024-11-13
CVE-2024-52550 Jenkins plugin Pipeline:Groovy 安全漏洞 — Jenkins Pipeline: Groovy Plugin 6.5AI Medium AI 2024-11-13
CVE-2024-52549 Jenkins plugin Script Security 安全漏洞 — Jenkins Script Security Plugin 4.3AI Medium AI 2024-11-13
CVE-2024-47807 Jenkins Plugin OpenId Connect Authentication 安全漏洞 — Jenkins OpenId Connect Authentication Plugin 9.8 - 2024-10-02
CVE-2024-47806 Jenkins Plugin OpenId Connect Authentication 安全漏洞 — Jenkins OpenId Connect Authentication Plugin 9.8 - 2024-10-02
CVE-2024-47805 Jenkins Plugin Credentials 安全漏洞 — Jenkins Credentials Plugin 7.1 - 2024-10-02
CVE-2024-47804 Jenkins 安全漏洞 — Jenkins 4.3 - 2024-10-02
CVE-2024-47803 Jenkins 安全漏洞 — Jenkins 6.5 - 2024-10-02
CVE-2024-43045 Jenkins 安全漏洞 — Jenkins 4.3AI Medium AI 2024-08-07
CVE-2024-43044 Jenkins 安全漏洞 — Jenkins 6.5AI Medium AI 2024-08-07
CVE-2024-39460 Jenkins Plugin Bitbucket Branch Source 安全漏洞 — Jenkins Bitbucket Branch Source Plugin 6.5AI Medium AI 2024-06-26
CVE-2024-39459 Jenkins Plugin Plain Credentials 安全漏洞 — Jenkins Plain Credentials Plugin 6.5AI Medium AI 2024-06-26
CVE-2024-39458 Jenkins 安全漏洞 — Jenkins Structs Plugin 4.3AI Medium AI 2024-06-26
CVE-2024-5273 Jenkins Plugin Report Info 安全漏洞 — Jenkins Report Info Plugin 4.3 - 2024-05-24
CVE-2024-34148 Jenkins Plugin Subversion Partial Release Manager 安全漏洞 — Jenkins Subversion Partial Release Manager Plugin 6.5 - 2024-05-02
CVE-2024-34147 Jenkins Plugin Telegram Bot 安全漏洞 — Jenkins Telegram Bot Plugin 3.3 - 2024-05-02
CVE-2024-34146 Jenkins Plugin Git server 安全漏洞 — Jenkins Git server Plugin 5.3 - 2024-05-02
CVE-2024-34145 Jenkins Plugin Script Security 安全漏洞 — Jenkins Script Security Plugin 9.9 - 2024-05-02
CVE-2024-34144 Jenkins Plugin Script Security 安全漏洞 — Jenkins Script Security Plugin 9.9 - 2024-05-02
CVE-2024-28162 Jenkins Delphix Plugin 安全漏洞 — Jenkins Delphix Plugin 4.9AI Medium AI 2024-03-06
CVE-2024-28161 Jenkins Delphix Plugin 安全漏洞 — Jenkins Delphix Plugin 2.7AI Low AI 2024-03-06
CVE-2024-28160 Jenkins iceScrum Plugin 安全漏洞 — Jenkins iceScrum Plugin 5.4AI Medium AI 2024-03-06
CVE-2024-28159 Jenkins Subversion Partial Release Manager Plugin 安全漏洞 — Jenkins Subversion Partial Release Manager Plugin 4.3AI Medium AI 2024-03-06
CVE-2024-28158 Jenkins Subversion Partial Release Manager Plugin 安全漏洞 — Jenkins Subversion Partial Release Manager Plugin 4.3AI Medium AI 2024-03-06
CVE-2024-28157 Jenkins GitBucket Plugin 安全漏洞 — Jenkins GitBucket Plugin 5.4AI Medium AI 2024-03-06
CVE-2024-28156 Jenkins Build Monitor View Plugin 安全漏洞 — Jenkins Build Monitor View Plugin 5.4AI Medium AI 2024-03-06
CVE-2024-28155 Jenkins AppSpider Plugin 安全漏洞 — Jenkins AppSpider Plugin 4.3AI Medium AI 2024-03-06
CVE-2024-28154 Jenkins MQ Notifier Plugin 安全漏洞 — Jenkins MQ Notifier Plugin 4.3AI Medium AI 2024-03-06
CVE-2024-28153 Jenkins OWASP Dependency-Check Plugin 安全漏洞 — Jenkins OWASP Dependency-Check Plugin 5.4AI Medium AI 2024-03-06
CVE-2024-28152 Jenkins Bitbucket Branch Source Plugin 安全漏洞 — Jenkins Bitbucket Branch Source Plugin 6.5 - 2024-03-06

This page lists every published CVE security advisory associated with Jenkins project. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.