Known vulnerabilities in jenkins (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jenkins (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jenkins_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
221
Public exploits:
17
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
2.516.3.1758302106-3.el8
2.516.3.1758302665-3.el8
2.516.3.1758298953-3.el8
2.516.3.1758299374-3.el8
2.516.3.1758336945-3.el9
2.516.3.1758259817-3.el9
2.516.3.1758260563-3.el9
2.516.3.1758206866-3.el9
2.516.2.1756738247-3.el8
2.516.2.1757087588-3.el8
2.516.2.1756902120-3.el8
2.516.2.1756732303-3.el9
2.516.2.1756902453-3.el8
2.516.2.1756903379-3.el9
2.516.2.1756733848-3.el9
2.516.2.1756731431-3.el9
2.504.2.1750856366-3.el8
2.504.2.1750857144-3.el9
2.504.2.1750851690-3.el9
2.504.2.1750903189-3.el8
2.504.2.1750916374-3.el8
2.504.2.1750932984-3.el8
2.504.2.1750846524-3.el9
2.462.3.1729839924-3.el8
2.462.3.1730119132-3.el8
2.462.3.1729839727-3.el8
2.462.3.1729837947-3.el8
2.440.3.1716445150-3.el8
2.440.3.1716445200-3.el8
2.440.3.1716387933-3.el8
2.426.3.1706515686-3.el8
2.426.3.1706516352-3.el8
2.426.3.1706516254-3.el8
2.426.3.1706516929-3.el8
2.414.3.1698298955-3.el8
2.414.3.1698293911-3.el8
2.414.3.1698292201-3.el8
2.401.1.1687268694-1.el8
2.401.1.1685677065-1.el8
2.401.1.1686831596-3.el8
2.401.1.1686649641-3.el8
2.401.1.1686680404-3.el8
2.387.3.1684911776-3.el8
2.387.3.1684251986-1.el8
2.387.1.1683009767-3.el8
2.387.1.1683009763-3.el8
2.387.1.1681718871-1.el8
2.387.1.1680701869-1.el8
2.361.4.1680068660-1.el8
2.361.4.1675935280-1.el8
2.361.4.1675702346-3.el8
2.361.1.1675668150-1.el8
2.361.1.1675406172-1.el8
2.319.3.1651752848-1.el8
2.263.3.1612433584-1.el7
2.263.3.1612449007-1.el8
2.235.5.1600670743-1.el8
2.235.5.1600415953-1.el7
2.235.2.1597220898-1.el7
2.222.1.1591351669-1.el7
2.361.1.1672840472-1.el8
2.361.1.1669892772-1.el8
2.346.1.1667459710-1.el8
2.346.3.1663151230-1.el8
2.319.3.1650888800-1.el8
2.319.3.1650348949-1.el7
2.319.2.1643288987-1.el8
2.319.2.1643964085-1.el8
2.319.2.1644411558-1.el7
2.319.2.1643648617-1.el8
2.319.2.1643882372-1.el8
2.319.2.1643391771-1.el8
2.303.3.1637597493-1.el8
2.303.3.1637698110-1.el7
2.303.3.1637597018-1.el8
2.303.3.1637596565-1.el8
2.303.3.1637595827-1.el8
2.289.3.1633554819-1.el8
2.289.3.1630554997-1.el8
2.289.2.1628252553-1.el8
2.289.2.1629437819-1.el8
2.289.1.1624020353-1.el8
2.277.3.1623846768-1.el7
2.289.1.1624365627-1.el7
2.263.3.1623239705-1.el8
2.277.3.1623853726-1.el8
2.277.3.1620985335-1.el8
2.277.3.1620393611-1.el8
2.263.3.1612434332-1.el7
2.263.3.1612434510-1.el8
2.235.5.1600414805-1.el7
2.235.5.1600415514-1.el7
2.222.1.1591349991-1.el7
2.235.2.1597312065-1.el7
2.235.2.1597312414-1.el7
2.222.1.1591351066-1.el7
2.204.2.1585048146-1.el7
1.498-1.1.el6op
1.502-1.el6op
1.506-1.el6op
1.509.1-1.el6op
1.565.3-1.el6op
1.609.1-1.el6op
1.625.3-2.el7aos
1.625.3-1.el6op
1.651.2-1.el6op
2.204.2.1583849753-1.el7
2.204.2.1583722864-1.el7
2.204.2.1583447235-1.el7
2.204.2.1583446818-1.el7
2.204.2.1580894255-1.el7
2.204.2.1580892861-1.el7
2.204.2.1580891656-1.el7
2.204.1.1581951349-1.el7
2.204.1.1581950993-1.el7
2.204.1.1578490170-1.el7
2.204.1.1578489705-1.el7
2.176.4.1578402941-1.el7
2.176.4.1576755573-1.el7
2.176.4.1574869394-1.el7
2.176.4.1574865864-1.el7
2.176.3.1575260130-1.el7
2.176.3.1571056173-1.el7
2.176.3.1569349414-1.el7
2.176.3.1568230904-1.el7
2.176.3.1568230481-1.el7
2.176.3.1568229898-1.el7
2.176.2.1563461785-1.el7
2.176.2.1563460897-1.el7
2.164.2.1556031745-1.el7
2.164.2.1555422716-1.el7
2.150.2.1549032159-1.el7
2.138.4.1544416383-1.el7
2.138.2.1542054911-1.el7
2.121.3.1534368708-1.el7
2.107.3.1525883128-1.el7
2.89.4.1528997057-1.el7
2.89.4.1519670652-1.el7
2.89.2.1516390120-1.el7
2.89.2.1516389759-1.el7
2.89.2-1.el7
2.73.3-1.el7
2.46.3-1.el7
2.32.2-1.el7
2.19.3-1.el7
2.7.4-1.el7
1.651.2-1.el7
1.642.2-1.el7
1.625.3-2.el7
1.651.2-1.el6
1.625.3-1.el6
1.609.1-1.el6
1.565.3-1.el6
1.554.2-1.el6
1.509.1-1.el6
1.506-1.el6
1.502-1.el6
1.488-2.el6
Vulnerabilities (221)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114316 - Resource exhaustion CVE-2025-5115 |
CWE-400 | Medium | 2.516.3.1758206866-3.el9, 2.516.3.1758259817-3.el9, 2.516.3.1758260563-3.el9, 2.516.3.1758298953-3.el8, 2.516.3.1758299374-3.el8, 2.516.3.1758302106-3.el8, 2.516.3.1758302665-3.el8, 2.516.3.1758336945-3.el9 | 21.08.2025 |
SB2025082101 SB2025082751 SB20250828111 and 42 more |
||
| #VU112106 - Memory corruption CVE-2025-52999 |
CWE-119 | Medium | 2.504.2.1750846524-3.el9, 2.504.2.1750851690-3.el9, 2.504.2.1750856366-3.el8, 2.504.2.1750857144-3.el9, 2.504.2.1750903189-3.el8, 2.504.2.1750916374-3.el8, 2.504.2.1750932984-3.el8 | 02.07.2025 |
SB2025070257 SB2025070261 SB2025070262 and 43 more |
||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | 2.516.2.1756731431-3.el9, 2.516.2.1756732303-3.el9, 2.516.2.1756733848-3.el9, 2.516.2.1756738247-3.el8, 2.516.2.1756902120-3.el8, 2.516.2.1756902453-3.el8, 2.516.2.1756903379-3.el9, 2.516.2.1757087588-3.el8 | 16.06.2025 |
SB2025061643 SB2025061644 SB2025061645 and 141 more |
||
| #VU108836 - Resource exhaustion CVE-2025-1948 |
CWE-400 | Medium | 2.504.2.1750846524-3.el9, 2.504.2.1750851690-3.el9, 2.504.2.1750856366-3.el8, 2.504.2.1750857144-3.el9, 2.504.2.1750903189-3.el8, 2.504.2.1750916374-3.el8, 2.504.2.1750932984-3.el8 | 09.05.2025 |
SB2025050924 SB2025051562 SB2025063009 and 18 more |
||
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | 2.504.2.1750846524-3.el9, 2.504.2.1750851690-3.el9, 2.504.2.1750856366-3.el8, 2.504.2.1750857144-3.el9, 2.504.2.1750903189-3.el8, 2.504.2.1750916374-3.el8, 2.504.2.1750932984-3.el8 | 03.04.2025 |
SB2025040317 SB2025040325 SB2025040326 and 63 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 2.504.2.1750846524-3.el9, 2.504.2.1750851690-3.el9, 2.504.2.1750856366-3.el8, 2.504.2.1750857144-3.el9, 2.504.2.1750903189-3.el8, 2.504.2.1750916374-3.el8, 2.504.2.1750932984-3.el8 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU98523 - Improper Certificate Validation CVE-2021-44549 |
CWE-295 | Medium | 2.462.3.1729837947-3.el8, 2.462.3.1729839727-3.el8, 2.462.3.1729839924-3.el8, 2.462.3.1730119132-3.el8 | 14.10.2024 |
SB2021122129 SB2024101593 SB2024101594 and 5 more |
||
| #VU98065 - Improper Access Control CVE-2024-47804 |
CWE-284 | Low | 2.462.3.1729837947-3.el8, 2.462.3.1729839727-3.el8, 2.462.3.1729839924-3.el8, 2.462.3.1730119132-3.el8 | 07.10.2024 |
SB2024100723 SB2024110549 SB2024110550 and 7 more |
||
| #VU98063 - Exposure of sensitive information to an unauthorized actor CVE-2024-47803 |
CWE-200 | Low | 2.462.3.1729837947-3.el8, 2.462.3.1729839727-3.el8, 2.462.3.1729839924-3.el8, 2.462.3.1730119132-3.el8 | 07.10.2024 |
SB2024100723 SB2024110549 SB2024110550 and 2 more |
||
| #VU96019 - Resource exhaustion CVE-2024-38808 |
CWE-400 | Medium | 2.462.3.1729837947-3.el8, 2.462.3.1729839727-3.el8, 2.462.3.1729839924-3.el8, 2.462.3.1730119132-3.el8 | 14.08.2024 |
SB2024081480 SB2024092018 SB2024100315 and 24 more |
||
| #VU89154 - Security Features CVE-2024-34145 |
CWE-254 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 06.05.2024 |
SB2024050613 SB20240611153 SB20240611154 and 1 more |
||
| #VU89153 - Security Features CVE-2024-34144 |
CWE-254 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8, 2.462.3.1730119132-3.el8 | 06.05.2024 |
SB2024050613 SB20240611153 SB20240611154 and 2 more |
||
| #VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24786 |
CWE-835 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 11.03.2024 |
SB2024031115 SB2024031435 SB2024031555 and 134 more |
||
| #VU87280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-28149 |
CWE-79 | Low | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 08.03.2024 |
SB2024030813 SB20240611153 SB20240611154 and 1 more |
||
| #VU86808 - Resource exhaustion CVE-2024-22201 |
CWE-400 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 26.02.2024 |
SB2024022652 SB2024030711 SB2024030845 and 43 more |
||
| #VU85792 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-23900 |
CWE-22 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 25.01.2024 |
SB2024012515 SB20240611153 SB20240611154 and 1 more |
||
| #VU85791 - Improper Access Control CVE-2024-23899 |
CWE-284 | Medium | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 25.01.2024 |
SB2024012514 SB20240611153 SB20240611154 and 1 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 2.440.3.1716387933-3.el8, 2.440.3.1716445150-3.el8, 2.440.3.1716445200-3.el8 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU75408 - Security Features CVE-2023-20862 |
CWE-254 | Medium | 2.426.3.1706515686-3.el8 | 21.04.2023 |
SB2023042130 SB2023042132 SB2023053121 and 20 more |
||
| #VU66065 - Resource exhaustion CVE-2022-1962 |
CWE-400 | Medium | 2.426.3.1706515686-3.el8 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 73 more |
Showing elements 1 - 20 out of 221