Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins — Jenkins Security Advisory 2025-09-17 Clear all filters
TI-2025-37021 CVE-2025-59476 · GHSA-qrh5-jg98-cr48

Injection in Jenkins

Priority LOW 30

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0038 Published 2025-09-17 Partial fix · 2.516.3, 2.528 CWE-117
TI-2025-37020 CVE-2025-59475 · GHSA-223m-4rfp-646h

Missing authorization in Jenkins

Priority LOW 21

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information ab…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00515 Published 2025-09-17 Partial fix · 2.516.3, 2.528 CWE-862
TI-2025-37019 CVE-2025-59474 · GHSA-67v4-38h7-9jjp

Missing authorization in Jenkins

Priority LOW 38

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05004 Published 2025-09-17 Partial fix · 2.516.3, 2.528 CWE-862