Known vulnerabilities in Jenkins LTS - page 3

Vendor: Jenkins
Software: Jenkins LTS
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jenkins LTS Jenkins LTS is affected by 129 known vulnerabilities: 18 high, 60 medium, 51 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106932 - Permissions, Privileges, and Access Controls
CVE-2025-31721
CWE-264 Medium
No
No
2.492.3 03.04.2025 SB2025040337
SB2025041695
SB20250416103
and 7 more
#VU105385 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-27625
CWE-601 Medium
No
No
2.492.2 06.03.2025 SB2025030623
#VU105384 - Cross-Site Request Forgery (CSRF)
CVE-2025-27624
CWE-352 Low
No
No
2.492.2 06.03.2025 SB2025030623
#VU105383 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27623
CWE-200 Medium
No
No
2.492.2 06.03.2025 SB2025030623
#VU105382 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27622
CWE-200 Medium
No
No
2.492.2 06.03.2025 SB2025030623
#VU98745 - Improper input validation
CVE-2024-47855
CWE-20 Medium
No
No
2.479.2 16.10.2024 SB2024101673
SB2024101678
SB2024101689
and 1 more
#VU98065 - Improper Access Control
CVE-2024-47804
CWE-284 Low
No
No
2.462.3 07.10.2024 SB2024100723
SB2024110549
SB2024110550
and 7 more
#VU98063 - Exposure of sensitive information to an unauthorized actor
CVE-2024-47803
CWE-200 Low
No
No
2.462.3 07.10.2024 SB2024100723
SB2024110549
SB2024110550
and 2 more
#VU95781 - Permissions, Privileges, and Access Controls
CVE-2024-43045
CWE-264 Medium
No
No
2.452.4, 2.462.1 12.08.2024 SB2024081207
#VU95780 - Improper Access Control
CVE-2024-43044
CWE-284 High
Available
No
2.452.4, 2.462.1 12.08.2024 SB2024081207
SB20241015131
SB20241015132
and 5 more
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
2.440.2 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU85790 - Missing Origin Validation in WebSockets
CVE-2024-23898
CWE-1385 High
Available
No
2.426.3 25.01.2024 SB2024012513
SB2024021214
SB2024021215
and 1 more
#VU85786 - Improper Access Control
CVE-2024-23897
CWE-284 High
Available
Exploited
2.426.3 25.01.2024 SB2024012513
SB2024021214
SB2024021215
and 6 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
2.440.3 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU80942 - Incorrect Default Permissions
CVE-2023-43498
CWE-276 Low
No
No
2.414.2 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80941 - Incorrect Default Permissions
CVE-2023-43497
CWE-276 Low
No
No
2.414.2 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80937 - Incorrect Default Permissions
CVE-2023-43496
CWE-276 Low
No
No
2.414.2 21.09.2023 SB2023092107
SB2023122252
SB2023122810
and 4 more
#VU80936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43495
CWE-79 Low
No
No
2.414.2 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80935 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43494
CWE-200 Low
No
No
2.414.2 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU78704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39151
CWE-79 Low
No
No
2.401.3 27.07.2023 SB2023072714
SB2023122252
SB2023122810


Showing elements 41 - 60 out of 129