Jenkins project vendor intelligence
Jenkins project Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Jenkins project products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 6
- Known exploited vulnerabilities affecting Jenkins project products
- In CISA KEV
- 3
- Records also listed in the official catalog
- Beyond CISA KEV
- 3
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 0
- Jenkins project KEVs with sensor-observed exploitation activity
The catalog gap matters for Jenkins project exposure
Three of the six exploited Jenkins project vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss half of this vendor portfolio.
- 50%
- Covered by CISA
- 50%
- Beyond CISA
- 4
- Product families
Attested Jenkins project vulnerabilities
6 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2019-1003000
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in... |
Script Security Plugin | High | Beyond CISA | 16 Sep 2026 |
|
CVE-2026-53435
In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins... |
Jenkins | High | Beyond CISA | 15 Jun 2026 |
|
CVE-2025-59474
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users... |
Jenkins | High | Beyond CISA | 26 Oct 2025 |
|
CVE-2019-1003030
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml,... |
Jenkins Pipeline: Groovy Plugin | Confirmed | In CISA | 25 Mar 2022 |
|
CVE-2019-1003029
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in... |
Jenkins Script Security Plugin | Confirmed | In CISA | 25 Apr 2022 |
|
CVE-2024-23897
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by... |
Jenkins | Confirmed | In CISA | 19 Aug 2024 |
No Jenkins project vulnerabilities match this search or filter.
Showing 6 of 6 on this page (6 Jenkins project known exploited vulnerabilities).
Recurring weakness patterns
Path traversal: 'dir/../../filename', deserialization, and protection mechanism failure account for three mapped occurrences across this Jenkins project KEV portfolio.