설치된 버전 확인
curl -sI http://127.0.0.1:8080/ (X-Jenkins) || java -jar jenkins.war --version영향받는 버전 라인
- 2.580 CVE 13건
- 2.579 CVE 19건
- 2.576 CVE 23건
- 2.568 CVE 27건
- 2.555 CVE 35건 지원 종료
- 2.551 CVE 37건
- 2.541 CVE 39건 지원 종료
- 2.528 CVE 44건 지원 종료
- 2.516 CVE 47건 지원 종료
- 2.504 CVE 47건 지원 종료
- 2.500 CVE 49건
- 2.492 CVE 53건 지원 종료
- 2.483 CVE 53건
- 2.479 CVE 51건 지원 종료
- 2.471 CVE 53건
- 2.462 CVE 55건 지원 종료
- 2.452 CVE 55건 지원 종료
- 2.442 CVE 55건
- 2.441 CVE 56건 KEV 1
- 2.428 CVE 57건 KEV 1
- 2.427 CVE 58건 KEV 1
- 2.426 CVE 59건 KEV 2 지원 종료
- 2.424 CVE 58건 KEV 2
- 2.421 CVE 63건 KEV 2
- 2.415 CVE 62건 KEV 2
- 2.414 CVE 63건 KEV 2 지원 종료
- 2.401 CVE 64건 KEV 2 지원 종료
- 2.400 CVE 64건 KEV 2
- 2.394 CVE 64건 KEV 2
- 2.375 CVE 71건 KEV 2 지원 종료
- 2.370 CVE 71건 KEV 2
- 2.367 CVE 72건 KEV 2
- 2.361 CVE 72건 KEV 2 지원 종료
- 2.355 CVE 72건 KEV 2
- 2.340 CVE 78건 KEV 2
- 2.335 CVE 76건 KEV 2
- 2.334 CVE 76건 KEV 2
- 2.332 CVE 77건 KEV 2
- 2.329 CVE 77건 KEV 2
- 2.321 CVE 78건 KEV 2
- 2.320 CVE 78건 KEV 2
- 2.319 CVE 77건 KEV 2
- 2.318 CVE 87건 KEV 2
- 2.314 CVE 89건 KEV 2
- 2.303 CVE 91건 KEV 2
- 2.300 CVE 91건 KEV 2
- 2.289 CVE 93건 KEV 2
- 2.286 CVE 93건 KEV 2
- 2.277 CVE 96건 KEV 2
- 2.276 CVE 96건 KEV 2
- 2.274 CVE 97건 KEV 2
- 2.270 CVE 107건 KEV 2
- 2.266 CVE 106건 KEV 2
- 2.263 CVE 105건 KEV 2
- 2.251 CVE 105건 KEV 2
- 2.244 CVE 108건 KEV 2
- 2.236 CVE 112건 KEV 2
- 2.235 CVE 113건 KEV 2
- 2.227 CVE 113건 KEV 2
- 2.222 CVE 117건 KEV 2
- 2.218 CVE 117건 KEV 2
- 2.217 CVE 124건 KEV 2
- 2.204 CVE 123건 KEV 2
- 2.196 CVE 123건 KEV 2
- 2.191 CVE 129건 KEV 2
- 2.185 CVE 131건 KEV 2
- 2.176 CVE 134건 KEV 2
- 2.171 CVE 134건 KEV 2
- 2.164 CVE 136건 KEV 2
- 2.159 CVE 136건 KEV 2
- 2.158 CVE 137건 KEV 2
- 2.153 CVE 138건 KEV 2
- 2.150 CVE 142건 KEV 3
- 2.145 CVE 142건 KEV 3
- 2.138 CVE 148건 KEV 3
- 2.137 CVE 148건 KEV 3
- 2.132 CVE 154건 KEV 3
- 2.122 CVE 161건 KEV 3
- 2.121 CVE 161건 KEV 3
- 2.120 CVE 161건 KEV 3
- 2.107 CVE 167건 KEV 3
- 2.106 CVE 168건 KEV 3
- 2.105 CVE 170건 KEV 3
- 2.94 CVE 170건 KEV 3
- 2.93 CVE 172건 KEV 3
- 2.89 CVE 173건 KEV 3
- 2.88 CVE 173건 KEV 3
- 2.83 CVE 175건 KEV 3
- 2.81 CVE 183건 KEV 3
- 2.73 CVE 182건 KEV 3
- 2.60 CVE 182건 KEV 3
- 2.56 CVE 182건 KEV 3
- 2.50 CVE 186건 KEV 4
- 2.46 CVE 185건 KEV 4
- 2.44 CVE 185건 KEV 4
- 2.32 CVE 200건 KEV 4
- 2.31 CVE 200건 KEV 4
- 2.19 CVE 201건 KEV 4
- 2.2 CVE 201건 KEV 4
- 1.651 CVE 208건 KEV 4
- 1.649 CVE 208건 KEV 4
- 1.642 CVE 213건 KEV 4
- 1.639 CVE 213건 KEV 4
- 1.638 CVE 217건 KEV 4
- 1.637 CVE 218건 KEV 4
- 1.625 CVE 228건 KEV 5
- 1.605 CVE 228건 KEV 5
- 1.599 CVE 231건 KEV 5
- 1.596 CVE 235건 KEV 5
- 1.586 CVE 235건 KEV 5
- 1.585 CVE 236건 KEV 5
- 1.583 CVE 238건 KEV 5
- 1.582 CVE 239건 KEV 5
- 1.580 CVE 246건 KEV 5
- 1.565 CVE 246건 KEV 5
- 1.550 CVE 246건 KEV 5
- 1.532 CVE 257건 KEV 5
- 1.523 CVE 258건 KEV 5
- 1.514 CVE 257건 KEV 5
- 1.509 CVE 258건 KEV 5
- 1.501 CVE 258건 KEV 5
- 1.498 CVE 264건 KEV 5
- 1.482 CVE 265건 KEV 5
- 1.480 CVE 269건 KEV 5
- 1.466 CVE 273건 KEV 5
- 1.447 CVE 273건 KEV 5
- 1.437 CVE 276건 KEV 5
- 1.436 CVE 277건 KEV 5
- 1.435 CVE 277건 KEV 5
- 1.434 CVE 277건 KEV 5
- 1.433 CVE 277건 KEV 5
- 1.432 CVE 277건 KEV 5
- 1.431 CVE 277건 KEV 5
- 1.430 CVE 277건 KEV 5
- 1.429 CVE 277건 KEV 5
- 1.428 CVE 277건 KEV 5
- 1.427 CVE 277건 KEV 5
- 1.426 CVE 277건 KEV 5
- 1.425 CVE 277건 KEV 5
- 1.424 CVE 277건 KEV 5
- 1.423 CVE 277건 KEV 5
- 1.422 CVE 277건 KEV 5
- 1.421 CVE 277건 KEV 5
- 1.420 CVE 277건 KEV 5
- 1.419 CVE 277건 KEV 5
- 1.418 CVE 277건 KEV 5
- 1.417 CVE 277건 KEV 5
- 1.416 CVE 277건 KEV 5
- 1.415 CVE 277건 KEV 5
- 1.414 CVE 277건 KEV 5
- 1.413 CVE 277건 KEV 5
- 1.412 CVE 277건 KEV 5
- 1.411 CVE 277건 KEV 5
- 1.410 CVE 277건 KEV 5
- 1.409 CVE 277건 KEV 5
- 1.408 CVE 277건 KEV 5
- 1.407 CVE 277건 KEV 5
- 1.406 CVE 277건 KEV 5
- 1.405 CVE 277건 KEV 5
- 1.404 CVE 277건 KEV 5
- 1.403 CVE 277건 KEV 5
- 1.402 CVE 277건 KEV 5
- 1.401 CVE 277건 KEV 5
- 1.400 CVE 277건 KEV 5
- 1.399 CVE 277건 KEV 5
- 1.398 CVE 277건 KEV 5
- 1.397 CVE 277건 KEV 5
- 1.396 CVE 277건 KEV 5
- 1.395 CVE 277건 KEV 5
- 1.394 CVE 277건 KEV 5
- 1.393 CVE 277건 KEV 5
- 1.392 CVE 277건 KEV 5
- 1.391 CVE 277건 KEV 5
- 1.390 CVE 277건 KEV 5
- 1.389 CVE 277건 KEV 5
- 1.388 CVE 277건 KEV 5
- 1.387 CVE 277건 KEV 5
- 1.386 CVE 277건 KEV 5
- 1.384 CVE 277건 KEV 5
- 1.383 CVE 277건 KEV 5
- 1.382 CVE 277건 KEV 5
- 1.380 CVE 277건 KEV 5
- 1.379 CVE 277건 KEV 5
- 1.378 CVE 277건 KEV 5
- 1.377 CVE 277건 KEV 5
- 1.376 CVE 277건 KEV 5
- 1.375 CVE 277건 KEV 5
- 1.374 CVE 277건 KEV 5
- 1.373 CVE 277건 KEV 5
- 1.372 CVE 277건 KEV 5
- 1.371 CVE 277건 KEV 5
- 1.370 CVE 277건 KEV 5
- 1.369 CVE 277건 KEV 5
- 1.368 CVE 277건 KEV 5
- 1.367 CVE 277건 KEV 5
- 1.366 CVE 277건 KEV 5
- 1.365 CVE 277건 KEV 5
- 1.364 CVE 277건 KEV 5
- 1.363 CVE 277건 KEV 5
- 1.362 CVE 277건 KEV 5
- 1.361 CVE 277건 KEV 5
- 1.360 CVE 277건 KEV 5
- 1.359 CVE 277건 KEV 5
- 1.358 CVE 277건 KEV 5
- 1.357 CVE 277건 KEV 5
- 1.356 CVE 277건 KEV 5
- 1.355 CVE 277건 KEV 5
- 1.354 CVE 277건 KEV 5
- 1.353 CVE 277건 KEV 5
- 1.352 CVE 277건 KEV 5
- 1.351 CVE 277건 KEV 5
- 1.350 CVE 277건 KEV 5
- 1.349 CVE 277건 KEV 5
- 1.348 CVE 277건 KEV 5
- 1.347 CVE 277건 KEV 5
- 1.346 CVE 277건 KEV 5
- 1.345 CVE 277건 KEV 5
- 1.344 CVE 277건 KEV 5
- 1.343 CVE 277건 KEV 5
- 1.342 CVE 277건 KEV 5
- 1.341 CVE 277건 KEV 5
- 1.340 CVE 277건 KEV 5
- 1.339 CVE 277건 KEV 5
- 1.338 CVE 277건 KEV 5
- 1.337 CVE 277건 KEV 5
- 1.336 CVE 277건 KEV 5
- 1.335 CVE 277건 KEV 5
- 1.334 CVE 277건 KEV 5
- 1.333 CVE 277건 KEV 5
- 1.332 CVE 277건 KEV 5
- 1.331 CVE 277건 KEV 5
- 1.330 CVE 277건 KEV 5
- 1.329 CVE 277건 KEV 5
- 1.328 CVE 277건 KEV 5
- 1.327 CVE 277건 KEV 5
- 1.326 CVE 277건 KEV 5
- 1.325 CVE 277건 KEV 5
- 1.324 CVE 277건 KEV 5
- 1.323 CVE 277건 KEV 5
- 1.322 CVE 277건 KEV 5
- 1.321 CVE 277건 KEV 5
- 1.320 CVE 277건 KEV 5
- 1.319 CVE 277건 KEV 5
- 1.318 CVE 277건 KEV 5
- 1.317 CVE 277건 KEV 5
- 1.316 CVE 277건 KEV 5
- 1.315 CVE 277건 KEV 5
- 1.314 CVE 277건 KEV 5
- 1.313 CVE 277건 KEV 5
- 1.312 CVE 277건 KEV 5
- 1.311 CVE 277건 KEV 5
- 1.310 CVE 277건 KEV 5
- 1.309 CVE 277건 KEV 5
- 1.308 CVE 277건 KEV 5
- 1.307 CVE 277건 KEV 5
- 1.306 CVE 277건 KEV 5
- 1.305 CVE 277건 KEV 5
- 1.304 CVE 277건 KEV 5
- 1.303 CVE 277건 KEV 5
- 1.302 CVE 277건 KEV 5
- 1.301 CVE 277건 KEV 5
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2024-23897 | Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that r... | < 2.426.3 < 2.442 | 9.8 | KEV | 100.0% | 2024-01-24 |
| CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can... | ≤ 2.414.2 ≤ 2.427 | 7.5 | KEV | 100.0% | 2023-10-10 |
| CVE-2018-1000861 | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.13... | ≤ 2.138.3 ≤ 2.153 | 9.8 | KEV | 98.3% | 2018-12-10 |
| CVE-2017-1000353 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remot... | ≤ 2.56 ≤ 2.46.1 | 9.8 | KEV | 99.7% | 2018-01-29 |
| CVE-2015-5317 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain s... | ≤ 1.637 ≤ 1.625.1 | 7.5 | KEV | 23.0% | 2015-11-25 |
| CVE-2026-117617 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117618 | In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account d... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117619 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authenticati... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117620 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger wa... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117621 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the work... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117622 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler H... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117623 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrum... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117624 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializ... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117612 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes refere... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117613 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deseriali... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117614 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117615 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an ite... | < 2.580.2 < 2.588 | 6.5 | — | 2026-10-28 | |
| CVE-2026-117616 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-84655 | Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON a... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84656 | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Re... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84657 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel pe... | ≤ 2.568.2 ≤ 2.579 | 4.2 | — | 2026-09-02 | |
| CVE-2026-84645 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84646 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other... | < 2.568.3 < 2.580 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84648 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metada... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84650 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserializatio... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84651 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent confi... | < 2.568.3 < 2.580 | 6.3 | — | 2026-09-02 | |
| CVE-2026-84652 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is auth... | < 2.568.3 < 2.580 | 7.3 | — | 2026-09-02 | |
| CVE-2026-84653 | Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly... | ≥ 2.421 ≤ 2.579 ≥ 2.426.1 ≤ 2.568.2 | 3.5 | — | 2026-09-02 | |
| CVE-2026-70427 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empt... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70428 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70429 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names in... | < 2.568.2 < 2.576 | 6.5 | — | 2026-08-05 | |
| CVE-2026-70430 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instanti... | < 2.568.2 < 2.576 | 2.7 | — | 2026-08-05 | |
| CVE-2026-53441 | Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the... | ≥ 2.483 < 2.568 ≥ 2.492.1 < 2.555.3 | 5.4 | — | 2026-06-10 | |
| CVE-2026-53442 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions b... | < 2.555.3 < 2.568 | 5.3 | — | 2026-06-10 | |
| CVE-2026-53435 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserializ... | < 2.555.3 < 2.568 | 8.8 | — | 2026-06-10 | |
| CVE-2026-53436 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53437 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53438 | A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Ca... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53439 | Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/R... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53440 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-33001 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction... | < 2.541.3 < 2.555 | 8.8 | — | 2026-03-18 | |
| CVE-2026-33002 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin... | ≥ 2.426.3 < 2.541.3 ≥ 2.442 < 2.555 | 7.5 | — | 2026-03-18 | |
| CVE-2026-27099 | Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the... | ≥ 2.483 < 2.551 ≥ 2.492.1 < 2.541.2 | 8.0 | — | 2026-02-18 | |
| CVE-2026-27100 | Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user... | < 2.541.2 < 2.551 | 4.3 | — | 2026-02-18 | |
| CVE-2025-67636 | A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Re... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67637 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67638 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the j... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67639 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows... | < 2.528.3 < 2.541 | 3.5 | — | 2025-12-10 | |
| CVE-2025-67635 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the... | < 2.528.3 < 2.541 | 7.5 | — | 2025-12-10 | |
| CVE-2025-59474 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a p... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2025-59475 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated u... | < 2.516.3 < 2.528 | 4.3 | — | 2025-09-17 | |
| CVE-2025-59476 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be i... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2024-9453 | Jenkins-image: sensitive data disclosure when using openshift jenkins image | * | 6.5 | — | 2025-07-04 | |
| CVE-2025-31720 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-31721 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-27623 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27624 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows... | < 2.492.2 < 2.500 | 5.4 | — | 2025-03-05 | |
| CVE-2025-27625 | In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27622 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2024-47803 | Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages... | < 2.462.3 < 2.479 | 4.3 | — | 2024-10-02 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).