Exploited vulnerabilities
Jenkins
6 Jenkins vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue6
Last 12 months0
In ransomware campaigns1
Last addition2 October 2025
The vulnerabilities6
- 2 October 2025CVE-2017-1000353JenkinsJenkins Remote Code Execution Vulnerability
- 19 August 2024CVE-2024-23897Jenkins Command Line Interface (CLI)Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityRansomware
- 12 May 2023CVE-2015-5317Jenkins User Interface (UI)Jenkins User Interface (UI) Information Disclosure Vulnerability
- 25 April 2022CVE-2019-1003029Script Security PluginJenkins Script Security Plugin Sandbox Bypass Vulnerability
- 25 March 2022CVE-2019-1003030Matrix Project PluginJenkins Matrix Project Plugin Remote Code Execution Vulnerability
- 10 February 2022CVE-2018-1000861Jenkins Stapler Web FrameworkJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Jenkins included.