JP
Vendor security profile
Jenkins Project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs49
Critical1
CISA KEV0
Public exploit0
Patch rate%4
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
3
0
23
23
0
CVE KEV
CVE severity distribution
49toplam CVE
Critical1 (2%)
High21 (43%)
Medium24 (49%)
Low3 (6%)
Patch and exploitation view
%4
Verified patch
%0
CISA KEV
%0
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
47Unknown
Latest vulnerabilities
4.3
CVE-2026-92141
Open redirect in Jenkins Project Jenkins Keycloak Authentication Plugin
JP
Patch status unknownEPSS %0
6.8
CVE-2026-92140
Cross-site scripting in Jenkins Project Jenkins Gitee Plugin
JP
Patch status unknownEPSS %0
6.5
CVE-2026-92139
Server-side request forgery in Jenkins Project Jenkins Bitbucket Push And Pull Request Plugin
JP
Patch status unknownEPSS %0
4.2
CVE-2026-92138
Vulnerability in Jenkins Project Jenkins Bitbucket Server Integration Plugin
JP
Patch status unknownEPSS %0
8.8
CVE-2026-92137
Path traversal in Jenkins Project Jenkins Robot Framework Plugin
JP
Patch status unknownEPSS %1
8.0
CVE-2026-92136
Cross-site scripting in Jenkins Project Jenkins OWASP Dependency Check Plugin
JP
Patch status unknownEPSS %0
8.0
CVE-2026-92135
Cross-site scripting in Jenkins Project Jenkins Coverage Plugin
JP
Patch status unknownEPSS %0
8.0
CVE-2026-92134
Cross-site scripting in Jenkins Project Jenkins Warnings Plugin
JP
Patch status unknownEPSS %0
5.4
CVE-2026-92133
Insufficiently protected credentials in Jenkins Project Jenkins GitLab Plugin
JP
Patch status unknownEPSS %0
5.4
CVE-2026-92132
Vulnerability in Jenkins Project Jenkins Gradle Plugin
JP
Patch status unknownEPSS %0