Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2017-1000353 — Jenkins Remote Code Execution Vulnerability
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.
|
Jenkins | Jenkins | Oct 2, 2025 | Oct 23, 2025 | |
|
CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.
|
Jenkins | Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Sep 9, 2024 | Ransomware |
|
CVE-2015-5317 — Jenkins User Interface (UI) Information Disclosure Vulnerability
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.
|
Jenkins | Jenkins User Interface (UI) | May 12, 2023 | Jun 2, 2023 | |
|
CVE-2019-1003029 — Jenkins Script Security Plugin Sandbox Bypass Vulnerability
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
|
Jenkins | Script Security Plugin | Apr 25, 2022 | May 16, 2022 | |
|
CVE-2019-1003030 — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.
|
Jenkins | Matrix Project Plugin | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2018-1000861 — Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
A code execution vulnerability exists in the Stapler web framework used by Jenkins
|
Jenkins | Jenkins Stapler Web Framework | Feb 10, 2022 | Aug 10, 2022 |
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.
Jenkins · Oct 2, 2025
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.
Jenkins Command Line Interface (CLI) · Aug 19, 2024
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.
Jenkins User Interface (UI) · May 12, 2023
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
Script Security Plugin · Apr 25, 2022
Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.
Matrix Project Plugin · Mar 25, 2022
A code execution vulnerability exists in the Stapler web framework used by Jenkins
Jenkins Stapler Web Framework · Feb 10, 2022