Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

jenkins jenkins vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2012-0324

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.454, Jenkins LTS prior to 1.424.5, and Jenkins Enterprise 1.400.x prior to 1.400.0.13 and 1.424.x prior to 1.424.5.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, a diff...
Cloudbees Jenkins 1.400Cloudbees Jenkins 1.400.0.12Cloudbees Jenkins 1.424Cloudbees Jenkins 1.424.5Cloudbees JenkinsJenkins Jenkins 1.301Jenkins Jenkins 1.302Jenkins Jenkins 1.303Jenkins Jenkins 1.304Jenkins Jenkins 1.305Jenkins Jenkins 1.306Jenkins Jenkins 1.307
4.3
CVSSv2

CVE-2012-0325

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.454, Jenkins LTS prior to 1.424.5, and Jenkins Enterprise 1.400.x prior to 1.400.0.13 and 1.424.x prior to 1.424.5.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, a diff...
Cloudbees JenkinsJenkins Jenkins 1.301Jenkins Jenkins 1.302Jenkins Jenkins 1.303Jenkins Jenkins 1.304Jenkins Jenkins 1.305Jenkins Jenkins 1.306Jenkins Jenkins 1.307Jenkins Jenkins 1.308Jenkins Jenkins 1.309Jenkins Jenkins 1.310Jenkins Jenkins 1.311
2.6
CVSSv2

CVE-2013-0158

Unspecified vulnerability in Jenkins prior to 1.498, Jenkins LTS prior to 1.480.2, and Jenkins Enterprise 1.447.x prior to 1.447.6.1 and 1.466.x prior to 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote malicious users to obtain the master ...
Cloudbees JenkinsJenkins Jenkins 1.400Jenkins Jenkins 1.401Jenkins Jenkins 1.402Jenkins Jenkins 1.403Jenkins Jenkins 1.404Jenkins Jenkins 1.405Jenkins Jenkins 1.406Jenkins Jenkins 1.407Jenkins Jenkins 1.408Jenkins Jenkins 1.409Jenkins Jenkins 1.410
4.3
CVSSv2

CVE-2012-6072

CRLF injection vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP re...
Cloudbees Jenkins 1.447.1.1Cloudbees Jenkins 1.447.2.2Cloudbees Jenkins 1.447.3.1Cloudbees Jenkins 1.400Cloudbees Jenkins 1.424Cloudbees Jenkins 1.447Jenkins JenkinsJenkins Jenkins 1.409.1Jenkins Jenkins 1.409.2Jenkins Jenkins 1.409.3Jenkins Jenkins 1.424.1Jenkins Jenkins 1.424.2
5.8
CVSSv2

CVE-2012-6073

Open redirect vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote malicious users to redirect users to arbitrary web sites and conduct ...
Cloudbees Jenkins 1.447.1.1Cloudbees Jenkins 1.447.2.2Cloudbees Jenkins 1.447.3.1Cloudbees Jenkins 1.400Cloudbees Jenkins 1.424Cloudbees Jenkins 1.447Jenkins JenkinsJenkins Jenkins 1.409.1Jenkins Jenkins 1.409.2Jenkins Jenkins 1.409.3Jenkins Jenkins 1.424.1Jenkins Jenkins 1.424.2
3.5
CVSSv2

CVE-2012-6074

Cross-site scripting (XSS) vulnerability in Jenkins prior to 1.491, Jenkins LTS prior to 1.480.1, and Jenkins Enterprise 1.424.x prior to 1.424.6.13, 1.447.x prior to 1.447.4.1, and 1.466.x prior to 1.466.10.1 allows remote authenticated users with write access to inject arbitrar...
Cloudbees JenkinsJenkins Jenkins 1.400Jenkins Jenkins 1.401Jenkins Jenkins 1.402Jenkins Jenkins 1.403Jenkins Jenkins 1.404Jenkins Jenkins 1.405Jenkins Jenkins 1.406Jenkins Jenkins 1.407Jenkins Jenkins 1.408Jenkins Jenkins 1.409Jenkins Jenkins 1.410
2.6
CVSSv2

CVE-2011-4344

Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins prior to 1.438, and 1.409 LTS prior to 1.409.3 LTS, when a stand-alone container is used, allows remote malicious users to inject arbitrary web script or HTML via vectors related to error messages.
Jenkins Jenkins 1.409.1Jenkins Jenkins 1.409.2Jenkins Jenkins
7.5
CVSSv3

CVE-2017-1000092

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciou...
Jenkins Git 0.1.0Jenkins Git 0.2.0Jenkins Git 0.3.0Jenkins Git 0.4.0Jenkins Git 0.5.0Jenkins Git 0.6.0Jenkins Git 0.7.0Jenkins Git 0.7.1Jenkins Git 0.7.2Jenkins Git 0.7.3Jenkins Git 0.8.0Jenkins Git 0.8.1
8.1
CVSSv3

CVE-2017-1000503

A race condition during Jenkins 2.81 up to and including 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted ...
Jenkins JenkinsJenkins Jenkins 2.89.1
6.5
CVSSv3

CVE-2017-1000084

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
Jenkins Parameterized Trigger 1.0Jenkins Parameterized Trigger 1.1Jenkins Parameterized Trigger 1.2Jenkins Parameterized Trigger 1.3Jenkins Parameterized Trigger 1.4Jenkins Parameterized Trigger 1.5Jenkins Parameterized Trigger 1.6Jenkins Parameterized Trigger 2.0Jenkins Parameterized Trigger 2.1Jenkins Parameterized Trigger 2.2Jenkins Parameterized Trigger 2.3Jenkins Parameterized Trigger 2.4
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook