Known vulnerabilities in Jenkins LTS - page 2

Vendor: Jenkins
Software: Jenkins LTS
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 8
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins LTS Jenkins LTS is affected by 129 known vulnerabilities: 18 high, 60 medium, 51 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134994 - Missing Encryption of Sensitive Data
CVE-2026-53442
CWE-311 Medium
No
No
2.555.3 22.06.2026 SB2026062227
#VU134984 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-53441
CWE-79 Low
No
No
2.555.3 22.06.2026 SB2026062227
#VU134982 - Missing Authorization
CVE-2026-53439
CWE-862 Medium
No
No
2.555.3 22.06.2026 SB2026062227
#VU134981 - Missing Authorization
CVE-2026-53438
CWE-862 Medium
No
No
2.555.3 22.06.2026 SB2026062227
#VU134980 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-53437
CWE-601 Medium
No
No
2.555.3 22.06.2026 SB2026062227
#VU134979 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-53436
CWE-601 Medium
No
No
2.555.3 22.06.2026 SB2026062227
#VU124227 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2026-33002
CWE-350 High
No
No
2.541.3 23.03.2026 SB2026032347
#VU124226 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-33001
CWE-59 Medium
No
No
2.541.3 23.03.2026 SB2026032347
#VU123070 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27100
CWE-200 Medium
No
No
2.541.2 19.02.2026 SB2026021922
#VU123069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27099
CWE-79 Low
No
No
2.541.2 19.02.2026 SB2026021922
SB2026042271
SB2026042272
and 4 more
#VU119842 - Cross-Site Request Forgery (CSRF)
CVE-2025-67639
CWE-352 Low
No
No
2.528.3 11.12.2025 SB2025121131
#VU119840 - Exposure of sensitive information to an unauthorized actor
CVE-2025-67638
CWE-200 Medium
No
No
2.528.3 11.12.2025 SB2025121131
#VU119839 - Cleartext Storage of Sensitive Information
CVE-2025-67637
CWE-312 Medium
No
No
2.528.3 11.12.2025 SB2025121131
#VU119838 - Missing Authorization
CVE-2025-67636
CWE-862 Medium
No
No
2.528.3 11.12.2025 SB2025121131
#VU119837 - Improper Resource Shutdown or Release
CVE-2025-67635
CWE-404 Medium
No
No
2.528.3 11.12.2025 SB2025121131
SB2025121805
SB2025121806
and 10 more
#VU115756 - Improper input validation
CVE-2025-59476
CWE-20 Medium
No
No
2.516.3 18.09.2025 SB2025091826
#VU115755 - Improper Access Control
CVE-2025-59475
CWE-284 Medium
No
No
2.516.3 18.09.2025 SB2025091826
#VU115754 - Improper Access Control
CVE-2025-59474
CWE-284 Medium
No
No
2.516.3 18.09.2025 SB2025091826
#VU114316 - Resource exhaustion
CVE-2025-5115
CWE-400 Medium
No
No
2.516.3 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU106932 - Permissions, Privileges, and Access Controls
CVE-2025-31721
CWE-264 Medium
No
No
2.492.3 03.04.2025 SB2025040337
SB2025041695
SB20250416103
and 7 more


Showing elements 21 - 40 out of 129