Exposure of Jenkins

CI
37
exposure score
13
sites use
1
exploited
3
critical
Vexday analysis

Jenkins acumula 141 CVEs catalogadas, com 8 novas surgidas nos últimos 90 dias, indicando um fluxo contínuo de descobertas que exige acompanhamento ativo. A taxa de exploração ativa está acima da média geral do catálogo — 1,6× superior —, e a CVE mais perigosa em atividade, CVE-2024-23897, registra EPSS máximo de 1,0, sinalizando probabilidade praticamente certa de exploração em ambientes expostos. O tipo de falha mais recorrente é CWE-862 (ausência de verificação de autorização), uma classe de vulnerabilidade que tende a viabilizar acesso não autorizado a funcionalidades críticas em ambientes de CI/CD. Equipes que operam Jenkins devem priorizar a correção das CVEs críticas e verificar imediatamente a exposição à CVE-2024-23897, dado o risco concreto e imediato que ela representa.

CVEs

159 results
CVE-2020-2163—Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS EPSS 1.2%CVE-2020-2222—Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting inEPSS 1.1%CVE-2026-33001HIGHJenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives,EPSS 1.1%CVE-2017-2598MEDIUMJenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secEPSS 1.1%CVE-2020-2221—Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resultingEPSS 1.1%CVE-2017-2599MEDIUMJenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new EPSS 1.1%CVE-2020-2104—Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.EPSS 1.1%CVE-2022-41224MEDIUMJenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the JenkinsEPSS 1.1%CVE-2017-2607MEDIUMjenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). JenkinEPSS 1.1%CVE-2017-2600MEDIUMIn jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system cEPSS 1.0%CVE-2023-43496HIGHJenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions fEPSS 1.0%CVE-2019-10402—In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a storeEPSS 1.0%CVE-2019-10404—Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a storedEPSS 1.0%CVE-2019-10403—Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a storedEPSS 1.0%CVE-2019-10401—In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, rEPSS 1.0%CVE-2020-2223—Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in tEPSS 1.0%CVE-2021-21608—Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSSEPSS 1.0%CVE-2021-21611—Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resultingEPSS 1.0%CVE-2021-21603—Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (EPSS 1.0%CVE-2020-2220—Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-EPSS 1.0%