检查您的版本
curl -sI http://127.0.0.1:8080/ (X-Jenkins) || java -jar jenkins.war --version受影响的版本系列
- 2.580 13 个 CVE
- 2.579 19 个 CVE
- 2.576 23 个 CVE
- 2.568 27 个 CVE
- 2.555 35 个 CVE 生命周期结束
- 2.551 37 个 CVE
- 2.541 39 个 CVE 生命周期结束
- 2.528 44 个 CVE 生命周期结束
- 2.516 47 个 CVE 生命周期结束
- 2.504 47 个 CVE 生命周期结束
- 2.500 49 个 CVE
- 2.492 53 个 CVE 生命周期结束
- 2.483 53 个 CVE
- 2.479 51 个 CVE 生命周期结束
- 2.471 53 个 CVE
- 2.462 55 个 CVE 生命周期结束
- 2.452 55 个 CVE 生命周期结束
- 2.442 55 个 CVE
- 2.441 56 个 CVE KEV 1
- 2.428 57 个 CVE KEV 1
- 2.427 58 个 CVE KEV 1
- 2.426 59 个 CVE KEV 2 生命周期结束
- 2.424 58 个 CVE KEV 2
- 2.421 63 个 CVE KEV 2
- 2.415 62 个 CVE KEV 2
- 2.414 63 个 CVE KEV 2 生命周期结束
- 2.401 64 个 CVE KEV 2 生命周期结束
- 2.400 64 个 CVE KEV 2
- 2.394 64 个 CVE KEV 2
- 2.375 71 个 CVE KEV 2 生命周期结束
- 2.370 71 个 CVE KEV 2
- 2.367 72 个 CVE KEV 2
- 2.361 72 个 CVE KEV 2 生命周期结束
- 2.355 72 个 CVE KEV 2
- 2.340 78 个 CVE KEV 2
- 2.335 76 个 CVE KEV 2
- 2.334 76 个 CVE KEV 2
- 2.332 77 个 CVE KEV 2
- 2.329 77 个 CVE KEV 2
- 2.321 78 个 CVE KEV 2
- 2.320 78 个 CVE KEV 2
- 2.319 77 个 CVE KEV 2
- 2.318 87 个 CVE KEV 2
- 2.314 89 个 CVE KEV 2
- 2.303 91 个 CVE KEV 2
- 2.300 91 个 CVE KEV 2
- 2.289 93 个 CVE KEV 2
- 2.286 93 个 CVE KEV 2
- 2.277 96 个 CVE KEV 2
- 2.276 96 个 CVE KEV 2
- 2.274 97 个 CVE KEV 2
- 2.270 107 个 CVE KEV 2
- 2.266 106 个 CVE KEV 2
- 2.263 105 个 CVE KEV 2
- 2.251 105 个 CVE KEV 2
- 2.244 108 个 CVE KEV 2
- 2.236 112 个 CVE KEV 2
- 2.235 113 个 CVE KEV 2
- 2.227 113 个 CVE KEV 2
- 2.222 117 个 CVE KEV 2
- 2.218 117 个 CVE KEV 2
- 2.217 124 个 CVE KEV 2
- 2.204 123 个 CVE KEV 2
- 2.196 123 个 CVE KEV 2
- 2.191 129 个 CVE KEV 2
- 2.185 131 个 CVE KEV 2
- 2.176 134 个 CVE KEV 2
- 2.171 134 个 CVE KEV 2
- 2.164 136 个 CVE KEV 2
- 2.159 136 个 CVE KEV 2
- 2.158 137 个 CVE KEV 2
- 2.153 138 个 CVE KEV 2
- 2.150 142 个 CVE KEV 3
- 2.145 142 个 CVE KEV 3
- 2.138 148 个 CVE KEV 3
- 2.137 148 个 CVE KEV 3
- 2.132 154 个 CVE KEV 3
- 2.122 161 个 CVE KEV 3
- 2.121 161 个 CVE KEV 3
- 2.120 161 个 CVE KEV 3
- 2.107 167 个 CVE KEV 3
- 2.106 168 个 CVE KEV 3
- 2.105 170 个 CVE KEV 3
- 2.94 170 个 CVE KEV 3
- 2.93 172 个 CVE KEV 3
- 2.89 173 个 CVE KEV 3
- 2.88 173 个 CVE KEV 3
- 2.83 175 个 CVE KEV 3
- 2.81 183 个 CVE KEV 3
- 2.73 182 个 CVE KEV 3
- 2.60 182 个 CVE KEV 3
- 2.56 182 个 CVE KEV 3
- 2.50 186 个 CVE KEV 4
- 2.46 185 个 CVE KEV 4
- 2.44 185 个 CVE KEV 4
- 2.32 200 个 CVE KEV 4
- 2.31 200 个 CVE KEV 4
- 2.19 201 个 CVE KEV 4
- 2.2 201 个 CVE KEV 4
- 1.651 208 个 CVE KEV 4
- 1.649 208 个 CVE KEV 4
- 1.642 213 个 CVE KEV 4
- 1.639 213 个 CVE KEV 4
- 1.638 217 个 CVE KEV 4
- 1.637 218 个 CVE KEV 4
- 1.625 228 个 CVE KEV 5
- 1.605 228 个 CVE KEV 5
- 1.599 231 个 CVE KEV 5
- 1.596 235 个 CVE KEV 5
- 1.586 235 个 CVE KEV 5
- 1.585 236 个 CVE KEV 5
- 1.583 238 个 CVE KEV 5
- 1.582 239 个 CVE KEV 5
- 1.580 246 个 CVE KEV 5
- 1.565 246 个 CVE KEV 5
- 1.550 246 个 CVE KEV 5
- 1.532 257 个 CVE KEV 5
- 1.523 258 个 CVE KEV 5
- 1.514 257 个 CVE KEV 5
- 1.509 258 个 CVE KEV 5
- 1.501 258 个 CVE KEV 5
- 1.498 264 个 CVE KEV 5
- 1.482 265 个 CVE KEV 5
- 1.480 269 个 CVE KEV 5
- 1.466 273 个 CVE KEV 5
- 1.447 273 个 CVE KEV 5
- 1.437 276 个 CVE KEV 5
- 1.436 277 个 CVE KEV 5
- 1.435 277 个 CVE KEV 5
- 1.434 277 个 CVE KEV 5
- 1.433 277 个 CVE KEV 5
- 1.432 277 个 CVE KEV 5
- 1.431 277 个 CVE KEV 5
- 1.430 277 个 CVE KEV 5
- 1.429 277 个 CVE KEV 5
- 1.428 277 个 CVE KEV 5
- 1.427 277 个 CVE KEV 5
- 1.426 277 个 CVE KEV 5
- 1.425 277 个 CVE KEV 5
- 1.424 277 个 CVE KEV 5
- 1.423 277 个 CVE KEV 5
- 1.422 277 个 CVE KEV 5
- 1.421 277 个 CVE KEV 5
- 1.420 277 个 CVE KEV 5
- 1.419 277 个 CVE KEV 5
- 1.418 277 个 CVE KEV 5
- 1.417 277 个 CVE KEV 5
- 1.416 277 个 CVE KEV 5
- 1.415 277 个 CVE KEV 5
- 1.414 277 个 CVE KEV 5
- 1.413 277 个 CVE KEV 5
- 1.412 277 个 CVE KEV 5
- 1.411 277 个 CVE KEV 5
- 1.410 277 个 CVE KEV 5
- 1.409 277 个 CVE KEV 5
- 1.408 277 个 CVE KEV 5
- 1.407 277 个 CVE KEV 5
- 1.406 277 个 CVE KEV 5
- 1.405 277 个 CVE KEV 5
- 1.404 277 个 CVE KEV 5
- 1.403 277 个 CVE KEV 5
- 1.402 277 个 CVE KEV 5
- 1.401 277 个 CVE KEV 5
- 1.400 277 个 CVE KEV 5
- 1.399 277 个 CVE KEV 5
- 1.398 277 个 CVE KEV 5
- 1.397 277 个 CVE KEV 5
- 1.396 277 个 CVE KEV 5
- 1.395 277 个 CVE KEV 5
- 1.394 277 个 CVE KEV 5
- 1.393 277 个 CVE KEV 5
- 1.392 277 个 CVE KEV 5
- 1.391 277 个 CVE KEV 5
- 1.390 277 个 CVE KEV 5
- 1.389 277 个 CVE KEV 5
- 1.388 277 个 CVE KEV 5
- 1.387 277 个 CVE KEV 5
- 1.386 277 个 CVE KEV 5
- 1.384 277 个 CVE KEV 5
- 1.383 277 个 CVE KEV 5
- 1.382 277 个 CVE KEV 5
- 1.380 277 个 CVE KEV 5
- 1.379 277 个 CVE KEV 5
- 1.378 277 个 CVE KEV 5
- 1.377 277 个 CVE KEV 5
- 1.376 277 个 CVE KEV 5
- 1.375 277 个 CVE KEV 5
- 1.374 277 个 CVE KEV 5
- 1.373 277 个 CVE KEV 5
- 1.372 277 个 CVE KEV 5
- 1.371 277 个 CVE KEV 5
- 1.370 277 个 CVE KEV 5
- 1.369 277 个 CVE KEV 5
- 1.368 277 个 CVE KEV 5
- 1.367 277 个 CVE KEV 5
- 1.366 277 个 CVE KEV 5
- 1.365 277 个 CVE KEV 5
- 1.364 277 个 CVE KEV 5
- 1.363 277 个 CVE KEV 5
- 1.362 277 个 CVE KEV 5
- 1.361 277 个 CVE KEV 5
- 1.360 277 个 CVE KEV 5
- 1.359 277 个 CVE KEV 5
- 1.358 277 个 CVE KEV 5
- 1.357 277 个 CVE KEV 5
- 1.356 277 个 CVE KEV 5
- 1.355 277 个 CVE KEV 5
- 1.354 277 个 CVE KEV 5
- 1.353 277 个 CVE KEV 5
- 1.352 277 个 CVE KEV 5
- 1.351 277 个 CVE KEV 5
- 1.350 277 个 CVE KEV 5
- 1.349 277 个 CVE KEV 5
- 1.348 277 个 CVE KEV 5
- 1.347 277 个 CVE KEV 5
- 1.346 277 个 CVE KEV 5
- 1.345 277 个 CVE KEV 5
- 1.344 277 个 CVE KEV 5
- 1.343 277 个 CVE KEV 5
- 1.342 277 个 CVE KEV 5
- 1.341 277 个 CVE KEV 5
- 1.340 277 个 CVE KEV 5
- 1.339 277 个 CVE KEV 5
- 1.338 277 个 CVE KEV 5
- 1.337 277 个 CVE KEV 5
- 1.336 277 个 CVE KEV 5
- 1.335 277 个 CVE KEV 5
- 1.334 277 个 CVE KEV 5
- 1.333 277 个 CVE KEV 5
- 1.332 277 个 CVE KEV 5
- 1.331 277 个 CVE KEV 5
- 1.330 277 个 CVE KEV 5
- 1.329 277 个 CVE KEV 5
- 1.328 277 个 CVE KEV 5
- 1.327 277 个 CVE KEV 5
- 1.326 277 个 CVE KEV 5
- 1.325 277 个 CVE KEV 5
- 1.324 277 个 CVE KEV 5
- 1.323 277 个 CVE KEV 5
- 1.322 277 个 CVE KEV 5
- 1.321 277 个 CVE KEV 5
- 1.320 277 个 CVE KEV 5
- 1.319 277 个 CVE KEV 5
- 1.318 277 个 CVE KEV 5
- 1.317 277 个 CVE KEV 5
- 1.316 277 个 CVE KEV 5
- 1.315 277 个 CVE KEV 5
- 1.314 277 个 CVE KEV 5
- 1.313 277 个 CVE KEV 5
- 1.312 277 个 CVE KEV 5
- 1.311 277 个 CVE KEV 5
- 1.310 277 个 CVE KEV 5
- 1.309 277 个 CVE KEV 5
- 1.308 277 个 CVE KEV 5
- 1.307 277 个 CVE KEV 5
- 1.306 277 个 CVE KEV 5
- 1.305 277 个 CVE KEV 5
- 1.304 277 个 CVE KEV 5
- 1.303 277 个 CVE KEV 5
- 1.302 277 个 CVE KEV 5
- 1.301 277 个 CVE KEV 5
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2024-23897 | Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that r... | < 2.426.3 < 2.442 | 9.8 | KEV | 100.0% | 2024-01-24 |
| CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can... | ≤ 2.414.2 ≤ 2.427 | 7.5 | KEV | 100.0% | 2023-10-10 |
| CVE-2018-1000861 | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.13... | ≤ 2.138.3 ≤ 2.153 | 9.8 | KEV | 98.3% | 2018-12-10 |
| CVE-2017-1000353 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remot... | ≤ 2.56 ≤ 2.46.1 | 9.8 | KEV | 99.7% | 2018-01-29 |
| CVE-2015-5317 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain s... | ≤ 1.637 ≤ 1.625.1 | 7.5 | KEV | 23.0% | 2015-11-25 |
| CVE-2026-117617 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117618 | In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account d... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117619 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authenticati... | < 2.580.2 < 2.588 | 8.1 | — | 2026-10-28 | |
| CVE-2026-117620 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger wa... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117621 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the work... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117622 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler H... | < 2.580.2 < 2.588 | 6.1 | — | 2026-10-28 | |
| CVE-2026-117623 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrum... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117624 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializ... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117612 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes refere... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117613 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deseriali... | < 2.580.2 < 2.588 | 5.4 | — | 2026-10-28 | |
| CVE-2026-117614 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-117615 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an ite... | < 2.580.2 < 2.588 | 6.5 | — | 2026-10-28 | |
| CVE-2026-117616 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without... | < 2.580.2 < 2.588 | 8.8 | — | 2026-10-28 | |
| CVE-2026-84655 | Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON a... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84656 | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Re... | ≤ 2.568.2 ≤ 2.579 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84657 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel pe... | ≤ 2.568.2 ≤ 2.579 | 4.2 | — | 2026-09-02 | |
| CVE-2026-84645 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84646 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other... | < 2.568.3 < 2.580 | 4.3 | — | 2026-09-02 | |
| CVE-2026-84648 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metada... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84650 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserializatio... | < 2.568.3 < 2.580 | 8.8 | — | 2026-09-02 | |
| CVE-2026-84651 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent confi... | < 2.568.3 < 2.580 | 6.3 | — | 2026-09-02 | |
| CVE-2026-84652 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is auth... | < 2.568.3 < 2.580 | 7.3 | — | 2026-09-02 | |
| CVE-2026-84653 | Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly... | ≥ 2.421 ≤ 2.579 ≥ 2.426.1 ≤ 2.568.2 | 3.5 | — | 2026-09-02 | |
| CVE-2026-70427 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empt... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70428 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal... | < 2.568.2 < 2.576 | 4.3 | — | 2026-08-05 | |
| CVE-2026-70429 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names in... | < 2.568.2 < 2.576 | 6.5 | — | 2026-08-05 | |
| CVE-2026-70430 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instanti... | < 2.568.2 < 2.576 | 2.7 | — | 2026-08-05 | |
| CVE-2026-53441 | Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the... | ≥ 2.483 < 2.568 ≥ 2.492.1 < 2.555.3 | 5.4 | — | 2026-06-10 | |
| CVE-2026-53442 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions b... | < 2.555.3 < 2.568 | 5.3 | — | 2026-06-10 | |
| CVE-2026-53435 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserializ... | < 2.555.3 < 2.568 | 8.8 | — | 2026-06-10 | |
| CVE-2026-53436 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53437 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is le... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53438 | A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Ca... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53439 | Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/R... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-53440 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate... | < 2.555.3 < 2.568 | 4.3 | — | 2026-06-10 | |
| CVE-2026-33001 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction... | < 2.541.3 < 2.555 | 8.8 | — | 2026-03-18 | |
| CVE-2026-33002 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin... | ≥ 2.426.3 < 2.541.3 ≥ 2.442 < 2.555 | 7.5 | — | 2026-03-18 | |
| CVE-2026-27099 | Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the... | ≥ 2.483 < 2.551 ≥ 2.492.1 < 2.541.2 | 8.0 | — | 2026-02-18 | |
| CVE-2026-27100 | Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user... | < 2.541.2 < 2.551 | 4.3 | — | 2026-02-18 | |
| CVE-2025-67636 | A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Re... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67637 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67638 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the j... | < 2.528.3 < 2.541 | 4.3 | — | 2025-12-10 | |
| CVE-2025-67639 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows... | < 2.528.3 < 2.541 | 3.5 | — | 2025-12-10 | |
| CVE-2025-67635 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the... | < 2.528.3 < 2.541 | 7.5 | — | 2025-12-10 | |
| CVE-2025-59474 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a p... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2025-59475 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated u... | < 2.516.3 < 2.528 | 4.3 | — | 2025-09-17 | |
| CVE-2025-59476 | Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be i... | < 2.516.3 < 2.528 | 5.3 | — | 2025-09-17 | |
| CVE-2024-9453 | Jenkins-image: sensitive data disclosure when using openshift jenkins image | * | 6.5 | — | 2025-07-04 | |
| CVE-2025-31720 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-31721 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Compute... | < 2.492.3 < 2.504 | 4.3 | — | 2025-04-02 | |
| CVE-2025-27623 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27624 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows... | < 2.492.2 < 2.500 | 5.4 | — | 2025-03-05 | |
| CVE-2025-27625 | In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2025-27622 | Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing... | < 2.492.2 < 2.500 | 4.3 | — | 2025-03-05 | |
| CVE-2024-47803 | Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages... | < 2.462.3 < 2.479 | 4.3 | — | 2024-10-02 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。