CVE Tools
Track your stack

Jenkins-ci

5 CVEs tracked since 2013. Since Nov 2013, none of them reached CISA KEV.

Jenkins-ci CVEs per month

Nov 2013 to Oct 2014. Point at a month, or focus the strip and use the arrow keys.
Jenkins-ci CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2013-1120
2013-12null or fewer
2014-01null or fewer
2014-02null or fewer
2014-03null or fewer
2014-04null or fewer
2014-0510
2014-06null or fewer
2014-07null or fewer
2014-08null or fewer
2014-09null or fewer
2014-1020

Products

The products that kept showing up in Jenkins-ci's monthly top three, with their CVEs summed over those months.

  1. Monitoring Plugin21 month
  2. Build Failure Analyzer11 month
  3. Exclusion11 month
  4. Subversion-plugin11 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Jenkins-ci.

  1. CVE-2014-3679The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.5.0
  2. CVE-2014-3678Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.4.3
  3. CVE-2013-6372The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.2.1
  4. CVE-2013-6373The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.5.5
  5. CVE-2013-6374Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.3.5

The record

Peak rank
#51 in Nov 2013
Busiest month shown
Nov 2013, 2 CVEs
Months with a KEV entry
0 since Nov 2013
Monthly snapshots
3 since 2013
Jenkins-ci's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store