← Back

Jenkins

jenkins

1,822 CVEs • 693 products

Products (693)

Click to collapse
Toggle
Jenkins
jenkins
Pipeline\
pipeline\
Git
git
Blue Ocean
blue_ocean
Subversion
subversion
Kubernetes
kubernetes
Rundeck
rundeck
Git Client
git_client
Github
github
Openid
openid
Gitlab
gitlab
Azure Ad
azure_ad
Electricflow
electricflow
Amazon Ec2
amazon_ec2
Git Parameter
git_parameter
Junit
junit
Mercurial
mercurial
Mailer
mailer
Google Login
google_login
Jira
jira
Job Import
job_import
Chef Sinatra
chef_sinatra
Mabl
mabl
Assembla
assembla
Delphix
delphix
Support Core
support_core
Fortify
fortify
Appspider
appspider
Scriptler
scriptler
Wso2 Oauth
wso2_oauth
Code Dx
code_dx
Ssh
ssh
Warnings
warnings
Maven
maven
Coverity
coverity
Ansible
ansible
S3 Publisher
s3_publisher
Credentials
credentials
Gogs
gogs
Icescrum
icescrum
Kubernetes Ci
kubernetes_ci
Team Concert
team_concert
Rapiddeploy
rapiddeploy
P4
p4
Requests
requests
Checkmarx
checkmarx
Proxmox
proxmox

CVEs (1,822)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Cloudbees
Jenkins
2Jenkins
Jenkins
Apr 29, 2026
Mar 9, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web...Show more
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.Show less
1Jenkins
1Jenkins
Apr 29, 2026
Dec 1, 2011
N/A· v4
N/A· v3
2.6 LOW· v2
Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.Show less