CVE-2025-67636mediumCWE-862

CVE-2025-67636: medium-severity vulnerability in Jenkins

Published

Follow this CVE+ Monitor Jenkins+ Monitor org.jenkins-ci.main:jenkins-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.2%
A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Jenkins Project · Jenkins
Related CVEs — Jenkins

In the same product, most dangerous first.

CVE-2024-23897CRITICALCVE-2024-23897EPSS 100.0%KEVCVE-2024-23898HIGHCVE-2024-23898EPSS 67.2%CVE-2026-53435HIGHCVE-2026-53435EPSS 51.2%CVE-2024-43044HIGHCVE-2024-43044EPSS 28.8%CVE-2025-59474MEDIUMCVE-2025-59474EPSS 5.0%CVE-2023-43494—CVE-2023-43494EPSS 3.9%