Проверьте свою версию
curl -sI http://127.0.0.1:8080/ (X-Jenkins) || java -jar jenkins.war --versionЗатронутые ветки версий
- 2.580 CVE: 13
- 2.579 CVE: 19
- 2.576 CVE: 23
- 2.568 CVE: 27
- 2.555 CVE: 35 Окончание поддержки
- 2.551 CVE: 37
- 2.541 CVE: 39 Окончание поддержки
- 2.528 CVE: 44 Окончание поддержки
- 2.516 CVE: 47 Окончание поддержки
- 2.504 CVE: 47 Окончание поддержки
- 2.500 CVE: 49
- 2.492 CVE: 53 Окончание поддержки
- 2.483 CVE: 53
- 2.479 CVE: 51 Окончание поддержки
- 2.471 CVE: 53
- 2.462 CVE: 55 Окончание поддержки
- 2.452 CVE: 55 Окончание поддержки
- 2.442 CVE: 55
- 2.441 CVE: 56 KEV 1
- 2.428 CVE: 57 KEV 1
- 2.427 CVE: 58 KEV 1
- 2.426 CVE: 59 KEV 2 Окончание поддержки
- 2.424 CVE: 58 KEV 2
- 2.421 CVE: 63 KEV 2
- 2.415 CVE: 62 KEV 2
- 2.414 CVE: 63 KEV 2 Окончание поддержки
- 2.401 CVE: 64 KEV 2 Окончание поддержки
- 2.400 CVE: 64 KEV 2
- 2.394 CVE: 64 KEV 2
- 2.375 CVE: 71 KEV 2 Окончание поддержки
- 2.370 CVE: 71 KEV 2
- 2.367 CVE: 72 KEV 2
- 2.361 CVE: 72 KEV 2 Окончание поддержки
- 2.355 CVE: 72 KEV 2
- 2.340 CVE: 78 KEV 2
- 2.335 CVE: 76 KEV 2
- 2.334 CVE: 76 KEV 2
- 2.332 CVE: 77 KEV 2
- 2.329 CVE: 77 KEV 2
- 2.321 CVE: 78 KEV 2
- 2.320 CVE: 78 KEV 2
- 2.319 CVE: 77 KEV 2
- 2.318 CVE: 87 KEV 2
- 2.314 CVE: 89 KEV 2
- 2.303 CVE: 91 KEV 2
- 2.300 CVE: 91 KEV 2
- 2.289 CVE: 93 KEV 2
- 2.286 CVE: 93 KEV 2
- 2.277 CVE: 96 KEV 2
- 2.276 CVE: 96 KEV 2
- 2.274 CVE: 97 KEV 2
- 2.270 CVE: 107 KEV 2
- 2.266 CVE: 106 KEV 2
- 2.263 CVE: 105 KEV 2
- 2.251 CVE: 105 KEV 2
- 2.244 CVE: 108 KEV 2
- 2.236 CVE: 112 KEV 2
- 2.235 CVE: 113 KEV 2
- 2.227 CVE: 113 KEV 2
- 2.222 CVE: 117 KEV 2
- 2.218 CVE: 117 KEV 2
- 2.217 CVE: 124 KEV 2
- 2.204 CVE: 123 KEV 2
- 2.196 CVE: 123 KEV 2
- 2.191 CVE: 129 KEV 2
- 2.185 CVE: 131 KEV 2
- 2.176 CVE: 134 KEV 2
- 2.171 CVE: 134 KEV 2
- 2.164 CVE: 136 KEV 2
- 2.159 CVE: 136 KEV 2
- 2.158 CVE: 137 KEV 2
- 2.153 CVE: 138 KEV 2
- 2.150 CVE: 142 KEV 3
- 2.145 CVE: 142 KEV 3
- 2.138 CVE: 148 KEV 3
- 2.137 CVE: 148 KEV 3
- 2.132 CVE: 154 KEV 3
- 2.122 CVE: 161 KEV 3
- 2.121 CVE: 161 KEV 3
- 2.120 CVE: 161 KEV 3
- 2.107 CVE: 167 KEV 3
- 2.106 CVE: 168 KEV 3
- 2.105 CVE: 170 KEV 3
- 2.94 CVE: 170 KEV 3
- 2.93 CVE: 172 KEV 3
- 2.89 CVE: 173 KEV 3
- 2.88 CVE: 173 KEV 3
- 2.83 CVE: 175 KEV 3
- 2.81 CVE: 183 KEV 3
- 2.73 CVE: 182 KEV 3
- 2.60 CVE: 182 KEV 3
- 2.56 CVE: 182 KEV 3
- 2.50 CVE: 186 KEV 4
- 2.46 CVE: 185 KEV 4
- 2.44 CVE: 185 KEV 4
- 2.32 CVE: 200 KEV 4
- 2.31 CVE: 200 KEV 4
- 2.19 CVE: 201 KEV 4
- 2.2 CVE: 201 KEV 4
- 1.651 CVE: 208 KEV 4
- 1.649 CVE: 208 KEV 4
- 1.642 CVE: 213 KEV 4
- 1.639 CVE: 213 KEV 4
- 1.638 CVE: 217 KEV 4
- 1.637 CVE: 218 KEV 4
- 1.625 CVE: 228 KEV 5
- 1.605 CVE: 228 KEV 5
- 1.599 CVE: 231 KEV 5
- 1.596 CVE: 235 KEV 5
- 1.586 CVE: 235 KEV 5
- 1.585 CVE: 236 KEV 5
- 1.583 CVE: 238 KEV 5
- 1.582 CVE: 239 KEV 5
- 1.580 CVE: 246 KEV 5
- 1.565 CVE: 246 KEV 5
- 1.550 CVE: 246 KEV 5
- 1.532 CVE: 257 KEV 5
- 1.523 CVE: 258 KEV 5
- 1.514 CVE: 257 KEV 5
- 1.509 CVE: 258 KEV 5
- 1.501 CVE: 258 KEV 5
- 1.498 CVE: 264 KEV 5
- 1.482 CVE: 265 KEV 5
- 1.480 CVE: 269 KEV 5
- 1.466 CVE: 273 KEV 5
- 1.447 CVE: 273 KEV 5
- 1.437 CVE: 276 KEV 5
- 1.436 CVE: 277 KEV 5
- 1.435 CVE: 277 KEV 5
- 1.434 CVE: 277 KEV 5
- 1.433 CVE: 277 KEV 5
- 1.432 CVE: 277 KEV 5
- 1.431 CVE: 277 KEV 5
- 1.430 CVE: 277 KEV 5
- 1.429 CVE: 277 KEV 5
- 1.428 CVE: 277 KEV 5
- 1.427 CVE: 277 KEV 5
- 1.426 CVE: 277 KEV 5
- 1.425 CVE: 277 KEV 5
- 1.424 CVE: 277 KEV 5
- 1.423 CVE: 277 KEV 5
- 1.422 CVE: 277 KEV 5
- 1.421 CVE: 277 KEV 5
- 1.420 CVE: 277 KEV 5
- 1.419 CVE: 277 KEV 5
- 1.418 CVE: 277 KEV 5
- 1.417 CVE: 277 KEV 5
- 1.416 CVE: 277 KEV 5
- 1.415 CVE: 277 KEV 5
- 1.414 CVE: 277 KEV 5
- 1.413 CVE: 277 KEV 5
- 1.412 CVE: 277 KEV 5
- 1.411 CVE: 277 KEV 5
- 1.410 CVE: 277 KEV 5
- 1.409 CVE: 277 KEV 5
- 1.408 CVE: 277 KEV 5
- 1.407 CVE: 277 KEV 5
- 1.406 CVE: 277 KEV 5
- 1.405 CVE: 277 KEV 5
- 1.404 CVE: 277 KEV 5
- 1.403 CVE: 277 KEV 5
- 1.402 CVE: 277 KEV 5
- 1.401 CVE: 277 KEV 5
- 1.400 CVE: 277 KEV 5
- 1.399 CVE: 277 KEV 5
- 1.398 CVE: 277 KEV 5
- 1.397 CVE: 277 KEV 5
- 1.396 CVE: 277 KEV 5
- 1.395 CVE: 277 KEV 5
- 1.394 CVE: 277 KEV 5
- 1.393 CVE: 277 KEV 5
- 1.392 CVE: 277 KEV 5
- 1.391 CVE: 277 KEV 5
- 1.390 CVE: 277 KEV 5
- 1.389 CVE: 277 KEV 5
- 1.388 CVE: 277 KEV 5
- 1.387 CVE: 277 KEV 5
- 1.386 CVE: 277 KEV 5
- 1.384 CVE: 277 KEV 5
- 1.383 CVE: 277 KEV 5
- 1.382 CVE: 277 KEV 5
- 1.380 CVE: 277 KEV 5
- 1.379 CVE: 277 KEV 5
- 1.378 CVE: 277 KEV 5
- 1.377 CVE: 277 KEV 5
- 1.376 CVE: 277 KEV 5
- 1.375 CVE: 277 KEV 5
- 1.374 CVE: 277 KEV 5
- 1.373 CVE: 277 KEV 5
- 1.372 CVE: 277 KEV 5
- 1.371 CVE: 277 KEV 5
- 1.370 CVE: 277 KEV 5
- 1.369 CVE: 277 KEV 5
- 1.368 CVE: 277 KEV 5
- 1.367 CVE: 277 KEV 5
- 1.366 CVE: 277 KEV 5
- 1.365 CVE: 277 KEV 5
- 1.364 CVE: 277 KEV 5
- 1.363 CVE: 277 KEV 5
- 1.362 CVE: 277 KEV 5
- 1.361 CVE: 277 KEV 5
- 1.360 CVE: 277 KEV 5
- 1.359 CVE: 277 KEV 5
- 1.358 CVE: 277 KEV 5
- 1.357 CVE: 277 KEV 5
- 1.356 CVE: 277 KEV 5
- 1.355 CVE: 277 KEV 5
- 1.354 CVE: 277 KEV 5
- 1.353 CVE: 277 KEV 5
- 1.352 CVE: 277 KEV 5
- 1.351 CVE: 277 KEV 5
- 1.350 CVE: 277 KEV 5
- 1.349 CVE: 277 KEV 5
- 1.348 CVE: 277 KEV 5
- 1.347 CVE: 277 KEV 5
- 1.346 CVE: 277 KEV 5
- 1.345 CVE: 277 KEV 5
- 1.344 CVE: 277 KEV 5
- 1.343 CVE: 277 KEV 5
- 1.342 CVE: 277 KEV 5
- 1.341 CVE: 277 KEV 5
- 1.340 CVE: 277 KEV 5
- 1.339 CVE: 277 KEV 5
- 1.338 CVE: 277 KEV 5
- 1.337 CVE: 277 KEV 5
- 1.336 CVE: 277 KEV 5
- 1.335 CVE: 277 KEV 5
- 1.334 CVE: 277 KEV 5
- 1.333 CVE: 277 KEV 5
- 1.332 CVE: 277 KEV 5
- 1.331 CVE: 277 KEV 5
- 1.330 CVE: 277 KEV 5
- 1.329 CVE: 277 KEV 5
- 1.328 CVE: 277 KEV 5
- 1.327 CVE: 277 KEV 5
- 1.326 CVE: 277 KEV 5
- 1.325 CVE: 277 KEV 5
- 1.324 CVE: 277 KEV 5
- 1.323 CVE: 277 KEV 5
- 1.322 CVE: 277 KEV 5
- 1.321 CVE: 277 KEV 5
- 1.320 CVE: 277 KEV 5
- 1.319 CVE: 277 KEV 5
- 1.318 CVE: 277 KEV 5
- 1.317 CVE: 277 KEV 5
- 1.316 CVE: 277 KEV 5
- 1.315 CVE: 277 KEV 5
- 1.314 CVE: 277 KEV 5
- 1.313 CVE: 277 KEV 5
- 1.312 CVE: 277 KEV 5
- 1.311 CVE: 277 KEV 5
- 1.310 CVE: 277 KEV 5
- 1.309 CVE: 277 KEV 5
- 1.308 CVE: 277 KEV 5
- 1.307 CVE: 277 KEV 5
- 1.306 CVE: 277 KEV 5
- 1.305 CVE: 277 KEV 5
- 1.304 CVE: 277 KEV 5
- 1.303 CVE: 277 KEV 5
- 1.302 CVE: 277 KEV 5
- 1.301 CVE: 277 KEV 5
Известные уязвимости
| CVE | Название | Затронутые версии | CVSS | Эксплуатируется | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
| CVE-2024-23897 | Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that r... | < 2.426.3 < 2.442 | 9.8 | KEV | 100.0% | 2024-01-24 |
| CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can... | ≤ 2.414.2 ≤ 2.427 | 7.5 | KEV | 100.0% | 2023-10-10 |
| CVE-2018-1000861 | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.13... | ≤ 2.138.3 ≤ 2.153 | 9.8 | KEV | 98.3% | 2018-12-10 |
| CVE-2017-1000353 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remot... | ≤ 2.56 ≤ 2.46.1 | 9.8 | KEV | 99.7% | 2018-01-29 |
| CVE-2015-5317 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain s... | ≤ 1.637 ≤ 1.625.1 | 7.5 | KEV | 23.0% | 2015-11-25 |
| CVE-2026-117617 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117618 | In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account d... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117619 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authenticati... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117620 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger wa... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117621 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the work... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117622 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler H... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117623 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrum... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117624 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializ... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117612 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes refere... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117613 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deseriali... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117614 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117615 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an ite... | < 2.580.2 < 2.588 | 6.5 | — | 2026-10-28 | |
| CVE-2026-117616 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-84655 | Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON a... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84656 | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Re... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84657 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel pe... | ≤ 2.568.2 ≤ 2.579 | 4.2 | — | 2026-09-02 | |
| CVE-2026-84645 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84646 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other... | < 2.568.3 < 2.580 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84648 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metada... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84650 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserializatio... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84651 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent confi... | < 2.568.3 < 2.580 | 6.3 | — | 2026-09-02 | |
| CVE-2026-84652 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is auth... | < 2.568.3 < 2.580 | 7.3 | — | 2026-09-02 | |
| CVE-2026-84653 | Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly... | ≥ 2.421 ≤ 2.579 ≥ 2.426.1 ≤ 2.568.2 | 3.5 | — | 2026-09-02 | |
| CVE-2026-70427 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empt... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70428 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70429 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names in... | < 2.568.2 < 2.576 | 6.5 | — | 2026-08-05 | |
| CVE-2026-70430 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instanti... | < 2.568.2 < 2.576 | 2.7 | — | 2026-08-05 | |
| CVE-2026-53441 | Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the... | ≥ 2.483 < 2.568 ≥ 2.492.1 < 2.555.3 | 5.4 | — | 2026-06-10 | |
| CVE-2026-53442 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions b... | < 2.555.3 < 2.568 | 5.3 | — | 2026-06-10 | |
| CVE-2026-53435 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserializ... | < 2.555.3 < 2.568 | 8.8 | — | 2026-06-10 | |
| CVE-2026-53436 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53437 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53438 | A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Ca... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53439 | Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/R... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53440 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-33001 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction... | < 2.541.3 < 2.555 | 8.8 | — | 2026-03-18 | |
| CVE-2026-33002 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin... | ≥ 2.426.3 < 2.541.3 ≥ 2.442 < 2.555 | 7.5 | — | 2026-03-18 | |
| CVE-2026-27099 | Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the... | ≥ 2.483 < 2.551 ≥ 2.492.1 < 2.541.2 | 8.0 | — | 2026-02-18 | |
| CVE-2026-27100 | Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user... | < 2.541.2 < 2.551 | 4.3 | — | 2026-02-18 | |
| CVE-2025-67636 | A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Re... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67637 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67638 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the j... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67639 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows... | < 2.528.3 < 2.541 | 3.5 | — | 2025-12-10 | |
| CVE-2025-67635 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the... | < 2.528.3 < 2.541 | 7.5 | — | 2025-12-10 | |
| CVE-2025-59474 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a p... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2025-59475 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated u... | < 2.516.3 < 2.528 | 4.3 | — | 2025-09-17 | |
| CVE-2025-59476 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be i... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2024-9453 | Jenkins-image: sensitive data disclosure when using openshift jenkins image | * | 6.5 | — | 2025-07-04 | |
| CVE-2025-31720 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-31721 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-27623 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27624 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows... | < 2.492.2 < 2.500 | 5.4 | — | 2025-03-05 | |
| CVE-2025-27625 | In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27622 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2024-47803 | Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages... | < 2.462.3 < 2.479 | 4.3 | — | 2024-10-02 |
Отслеживайте эти версии на своих серверах
InfraGuard собирает версии установленного ПО со всех серверов и отмечает версии с известными уязвимостями. Self-hosted — данные не покидают вашу сеть.
Данные: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (об EPSS см. https://www.first.org/epss), endoflife.date. Список ПО: awesome-selfhosted (CC BY-SA 3.0).