Known vulnerabilities in Script Security
Vendor:
Jenkins
Software:
Script Security
Software CPE:
cpe:2.3:a:jenkins:script-security:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
40
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
1422.v06869826dd9b_
1415.v9a_f9b_3a_c253d
1412.v7737b_3405f86
1402.1405.vc96e74964250
1402.v94c9ce464861
1399.ve6a_66547f6e1
1368.vb_b_402e3547e7
1367.vdf2fc45f229c
1336.vf33a_a_9863911
1335.vf07d9ce377a_e
1229.v4880b_b_e905a_6
1228.vd93135a_2fb_25
1190.v65867a_a_47126
1189.vb_a_b_7c8fd5fde
1184.v85d16b_d851b_3
1183.v774b_0b_0a_a_451
1172.v35f6a_0b_8207e
1158.v7c1b_73a_69a_08
1.78.1
1.78
1.77
1.76
1.66.5
1.75
1.74
1.66.4
1.73
1.72
1.57.6
1.66.3
1.71
1.57.5
1.70
1.66.2
1.69
1.57.4
1.66.1
1.68
1.67
1.66
1.54.4
1.57.3
1.63.1
1.65
1.64
1.54.3
1.57.2
1.63
1.54.2
1.57.1
1.60.1
1.62
1.61
1.0-beta-1
1.0-beta-2
1.0-beta-3
1.0-beta-4
1.0-beta-5
1.0-beta-6
1.59
1.60
1.58
1.57
1.54.1
1.55
1.56
1.54
1.53
1.52
1.51
1.50
1.49
1.48
1.47
1.46.1
1.46
1.45
1.44.1
1.44
1.43
1.42
1.41
1.40
1.39
1.38
1.37
1.36
1.35
1.34
1.33
1.32
1.31
1.30
1.29.1
1.29
1.28
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20
1.19
1.18.1
1.18
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
Vulnerabilities (40)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151508 - Protection Mechanism Failure CVE-2026-92129 |
CWE-693 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151503 - Download of Code Without Integrity Check CVE-2026-92128 |
CWE-494 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151502 - Improper Control of Generation of Code ('Code Injection') CVE-2026-92127 |
CWE-94 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151501 - Protection Mechanism Failure CVE-2026-92126 |
CWE-693 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151494 - Improper Control of Generation of Code ('Code Injection') CVE-2026-92125 |
CWE-94 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151489 - Protection Mechanism Failure CVE-2026-92124 |
CWE-693 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151488 - Protection Mechanism Failure CVE-2026-92123 |
CWE-693 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU151487 - Protection Mechanism Failure CVE-2026-92122 |
CWE-693 | Medium | 1422.v06869826dd9b_ | 21.09.2026 |
SB2026092108 |
||
| #VU146958 - Missing Authorization CVE-2026-84659 |
CWE-862 | Medium | 1415.v9a_f9b_3a_c253d | 04.09.2026 |
SB2026090455 |
||
| #VU146957 - Exposure of sensitive information to an unauthorized actor CVE-2026-84658 |
CWE-200 | Medium | 1415.v9a_f9b_3a_c253d | 04.09.2026 |
SB2026090455 |
||
| #VU135695 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-57281 |
CWE-93 | Medium | 1402.1405.vc96e74964250 | 29.06.2026 |
SB2026062905 |
||
| #VU135662 - Protection Mechanism Failure CVE-2026-57280 |
CWE-693 | Medium | 1402.1405.vc96e74964250 | 29.06.2026 |
SB2026062905 |
||
| #VU129237 - Missing Authorization CVE-2026-42519 |
CWE-862 | Medium | 1402.v94c9ce464861 | 04.05.2026 |
SB2026050406 |
||
| #VU100585 - Permissions, Privileges, and Access Controls CVE-2024-52549 |
CWE-264 | Low | 1368.vb_b_402e3547e7 | 18.11.2024 |
SB2024111821 |
||
| #VU89154 - Security Features CVE-2024-34145 |
CWE-254 | Medium | 1336.vf33a_a_9863911 | 06.05.2024 |
SB2024050613 SB20240611153 SB20240611154 and 1 more |
||
| #VU89153 - Security Features CVE-2024-34144 |
CWE-254 | Medium | 1336.vf33a_a_9863911 | 06.05.2024 |
SB2024050613 SB20240611153 SB20240611154 and 2 more |
||
| #VU71499 - Permissions, Privileges, and Access Controls CVE-2023-24422 |
CWE-264 | Medium | 1229.v4880b_b_e905a_6 | 25.01.2023 |
SB2023012504 SB2023041270 SB2023041272 and 14 more |
||
| #VU69368 - CVE-2022-45379 |
Medium | 1190.v65867a_a_47126 | 16.11.2022 |
SB2022111616 SB2023020889 SB2023022307 and 3 more |
|||
| #VU68595 - Protection Mechanism Failure CVE-2022-43404 |
CWE-693 | Medium | 1184.v85d16b_d851b_3 | 24.10.2022 |
SB2022102420 SB2023020889 SB2023022307 and 3 more |
||
| #VU68594 - Protection Mechanism Failure CVE-2022-43401 |
CWE-693 | Medium | 1184.v85d16b_d851b_3 | 24.10.2022 |
SB2022102420 SB2023020889 SB2023022307 and 4 more |
Showing elements 1 - 20 out of 40