J
Vendor security profile6 actively exploited CVEs
jenkins
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs60
Critical1
CISA KEV6
Public exploit6
Patch rate%7
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
1
0
0
6
0
5
22
0
CVE KEV
CVE severity distribution
60toplam CVE
Critical1 (2%)
High23 (38%)
Medium31 (52%)
Low2 (3%)
Uncertain3 (5%)
Patch and exploitation view
%7
Verified patch
%10
CISA KEV
%10
Public exploit
3Patch available
1Partial
3Workaround
1Vendor: no patch
52Unknown
Latest vulnerabilities
4.3
CVE-2026-92141
Open redirect in Jenkins Project Jenkins Keycloak Authentication Plugin
JP
Patch status unknownEPSS %0
6.8
CVE-2026-92140
Cross-site scripting in Jenkins Project Jenkins Gitee Plugin
JP
Patch status unknownEPSS %0
6.5
CVE-2026-92139
Server-side request forgery in Jenkins Project Jenkins Bitbucket Push And Pull Request Plugin
JP
Patch status unknownEPSS %0
4.2
CVE-2026-92138
Vulnerability in Jenkins Project Jenkins Bitbucket Server Integration Plugin
JP
Patch status unknownEPSS %0
8.8
CVE-2026-92137
Path traversal in Jenkins Project Jenkins Robot Framework Plugin
JP
Patch status unknownEPSS %1
8.0
CVE-2026-92136
Cross-site scripting in Jenkins Project Jenkins OWASP Dependency Check Plugin
JP
Patch status unknownEPSS %0
8.0
CVE-2026-92135
Cross-site scripting in Jenkins Project Jenkins Coverage Plugin
JP
Patch status unknownEPSS %0
8.0
CVE-2026-92134
Cross-site scripting in Jenkins Project Jenkins Warnings Plugin
JP
Patch status unknownEPSS %0
5.4
CVE-2026-92133
Insufficiently protected credentials in Jenkins Project Jenkins GitLab Plugin
JP
Patch status unknownEPSS %0
5.4
CVE-2026-92132
Vulnerability in Jenkins Project Jenkins Gradle Plugin
JP
Patch status unknownEPSS %0