Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

SDLC

Jenkins

Jenkins is a free and open source automation server. It helps automate the parts of software development related to building testing and deploying facilitating continuous integration and continuous delivery. It is a server-based system that runs in servlet containers such as Apache Tomcat.

Official Site:

https://www.jenkins.io/

Severity Summary:

Critical: 19 High: 54 Medium: 154 Low: 10
Reference
Title
Severity
CVE-2020-2101
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability
Medium
CVE-2018-1999004
Jenkins Incorrect Authorization Vulnerability
Medium
CVE-2018-1000195
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2018-1000193
Jenkins Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Medium
CVE-2016-0790
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-1000396
Jenkins Improper Certificate Validation Vulnerability
Medium
CVE-2017-1000395
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-1000392
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-17383
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-3727
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2016-3725
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2016-3724
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2016-3723
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2016-3722
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2016-0789
Jenkins Improper Input Validation Vulnerability
Medium
CVE-2017-1000400
Jenkins Missing Authorization Vulnerability
Medium
CVE-2020-2230
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-4441
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-4440
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-4439
Jenkins Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-5323
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2015-5321
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2015-5320
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2014-3665
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2015-1810
Jenkins Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2017-1000398
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-1000399
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-1000355
Jenkins Deserialization of Untrusted Data Vulnerability
Medium
CVE-2017-2606
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-2613
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability
Medium