Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

SDLC

Jenkins

Jenkins is a free and open source automation server. It helps automate the parts of software development related to building testing and deploying facilitating continuous integration and continuous delivery. It is a server-based system that runs in servlet containers such as Apache Tomcat.

Official Site:

https://www.jenkins.io/

Severity Summary:

Critical: 19 High: 54 Medium: 154 Low: 10
Reference
Title
Severity
CVE-2019-10353
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2020-2160
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2023-43497
Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2019-1003049
Jenkins Insufficient Session Expiration Vulnerability
High
CVE-2023-43496
Jenkins Incorrect Default Permissions Vulnerability
High
CVE-2023-44487
Jenkins Vulnerability
High
CVE-2023-43498
Jenkins Vulnerability
High
CVE-2019-1003003
Jenkins Insufficient Session Expiration Vulnerability
High
CVE-2023-27901
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2023-27899
Jenkins Incorrect Authorization Vulnerability
High
CVE-2018-1000863
Jenkins Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2018-1000410
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2023-27900
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2014-2058
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2021-21639
Jenkins Improper Input Validation Vulnerability
Medium
CVE-2014-9634
Jenkins 7PK - Security Features Vulnerability
Medium
CVE-2014-2065
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-3721
Jenkins DEPRECATED: Code Vulnerability
Medium
CVE-2014-9635
Jenkins 7PK - Security Features Vulnerability
Medium
CVE-2014-2064
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2024-43045
Jenkins Missing Authorization Vulnerability
Medium
CVE-2013-5573
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-2059
Jenkins Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Medium
CVE-2014-2062
Jenkins Improper Authentication Vulnerability
Medium
CVE-2024-47803
Jenkins Generation of Error Message Containing Sensitive Information Vulnerability
Medium
CVE-2014-2060
Jenkins Vulnerability
Medium
CVE-2024-47804
Jenkins Vulnerability
Medium
CVE-2021-21640
Jenkins Improper Handling of Inconsistent Structural Elements Vulnerability
Medium
CVE-2013-7330
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2023-27904
Jenkins Vulnerability
Medium