Jenkins: exploited vulnerabilities
- 6exploited vulnerabilities
- 1used by ransomware
- Oct 2, 2025latest one added
- Jenkins 1
- Jenkins Command Line Interface (CLI) 1
- Jenkins User Interface (UI) 1
- Script Security Plugin 1
- Matrix Project Plugin 1
- Jenkins Stapler Web Framework 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 2, 2025 | Remote Code Execution | Jenkins | Critical 9.8 | 99.7% |
| Aug 19, 2024 | Command Line Interface (CLI) Path Traversal | Jenkins Command Line Interface (CLI) | Critical 9.8 | >99.9% |
| May 12, 2023 | User Interface (UI) Information Disclosure | Jenkins User Interface (UI) | High 7.5 | 23% |
| Apr 25, 2022 | Sandbox Bypass | Script Security Plugin | Critical 9.9 | 74% |
| Mar 25, 2022 | Remote Code Execution | Matrix Project Plugin | Critical 9.9 | 97% |
| Feb 10, 2022 | Stapler Web Framework Deserialization of Untrusted Data | Jenkins Stapler Web Framework | Critical 9.8 | 98% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.