# Jenkins vulnerabilities

> Jenkins has 1,665 published vulnerabilities across 695 products in our catalogue. 6 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Jenkins, with 255. If you run Jenkins software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/jenkins

## At a glance

- **Published vulnerabilities:** 1,665
- **Known to be exploited:** 6
- **Products:** 695
- **Versions:** 14,592
- **Most recently added to the known-exploited list:** [CVE-2017-1000353](https://www.precursorintelligence.com/what-is/cve-2017-1000353), 2 October 2025. We keep watching the list.

## Which Jenkins products have the most vulnerabilities?

- [Jenkins](https://www.precursorintelligence.com/product/jenkins/jenkins): 255 published vulnerabilities, 1,275 versions
- [Script Security](https://www.precursorintelligence.com/product/jenkins/script_security): 32 published vulnerabilities, 126 versions
- [Blue Ocean](https://www.precursorintelligence.com/product/jenkins/blue_ocean): 11 published vulnerabilities, 92 versions
- [Git](https://www.precursorintelligence.com/product/jenkins/git): 11 published vulnerabilities, 167 versions
- [Email Extension](https://www.precursorintelligence.com/product/jenkins/email_extension): 10 published vulnerabilities, 121 versions
- [Build Failure Analyzer](https://www.precursorintelligence.com/product/jenkins/build_failure_analyzer): 9 published vulnerabilities, 62 versions
- [Active Directory](https://www.precursorintelligence.com/product/jenkins/active_directory): 9 published vulnerabilities, 82 versions
- [Config File Provider](https://www.precursorintelligence.com/product/jenkins/config_file_provider): 9 published vulnerabilities, 74 versions
- [Configuration As Code](https://www.precursorintelligence.com/product/jenkins/configuration_as_code): 9 published vulnerabilities, 69 versions
- [Ns-Nd Integration Performance Publisher](https://www.precursorintelligence.com/product/jenkins/ns-nd_integration_performance_publisher): 8 published vulnerabilities, 5 versions

Each product page lists its own known-exploited flaws.

## Which Jenkins vulnerabilities are being exploited?

6 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2017-1000353](https://www.precursorintelligence.com/what-is/cve-2017-1000353): Jenkins Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 2 October 2025.
- [CVE-2024-23897](https://www.precursorintelligence.com/what-is/cve-2024-23897): Jenkins Command Line Interface (CLI) Path Traversal Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 19 August 2024.
- [CVE-2023-44487](https://www.precursorintelligence.com/what-is/cve-2023-44487): HTTP/2 Rapid Reset Attack Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 October 2023.
- [CVE-2015-5317](https://www.precursorintelligence.com/what-is/cve-2015-5317): Jenkins User Interface (UI) Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 23%, known exploited since 12 May 2023.
- [CVE-2019-1003029](https://www.precursorintelligence.com/what-is/cve-2019-1003029): Jenkins Script Security Plugin Sandbox Bypass Vulnerability. Critical, CVSS 9.9, chance of use in 30 days 74%, known exploited since 25 April 2022.
- [CVE-2018-1000861](https://www.precursorintelligence.com/what-is/cve-2018-1000861): Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 98%, known exploited since 10 February 2022.

## Which Jenkins flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2017-1000353](https://www.precursorintelligence.com/what-is/cve-2017-1000353): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2019-1003000](https://www.precursorintelligence.com/what-is/cve-2019-1003000): 98%, High (CVSS 8.8)
- [CVE-2018-1000861](https://www.precursorintelligence.com/what-is/cve-2018-1000861): 98%, Critical (CVSS 9.8), known exploited
- [CVE-2016-9299](https://www.precursorintelligence.com/what-is/cve-2016-9299): 97%, Critical (CVSS 9.8)
- [CVE-2020-2096](https://www.precursorintelligence.com/what-is/cve-2020-2096): 93%, Medium (CVSS 6.1)
- [CVE-2018-1000600](https://www.precursorintelligence.com/what-is/cve-2018-1000600): 91%, High (CVSS 8.8)
- [CVE-2021-21699](https://www.precursorintelligence.com/what-is/cve-2021-21699): 88%, Medium (CVSS 5.4)
- [CVE-2015-8103](https://www.precursorintelligence.com/what-is/cve-2015-8103): 87%, Critical (CVSS 9.8)
- [CVE-2018-1999002](https://www.precursorintelligence.com/what-is/cve-2018-1999002): 86%, High (CVSS 7.5)
- [CVE-2016-0792](https://www.precursorintelligence.com/what-is/cve-2016-0792): 83%, High (CVSS 8.8)

## All Jenkins products we track

653 products with at least one tracked version, most vulnerabilities first (the top 150 here; every product is on the page):

- [Jenkins](https://www.precursorintelligence.com/product/jenkins/jenkins): 255 vulnerabilities, 1,275 versions
- [Script Security](https://www.precursorintelligence.com/product/jenkins/script_security): 32 vulnerabilities, 126 versions
- [Blue Ocean](https://www.precursorintelligence.com/product/jenkins/blue_ocean): 11 vulnerabilities, 92 versions
- [Git](https://www.precursorintelligence.com/product/jenkins/git): 11 vulnerabilities, 167 versions
- [Email Extension](https://www.precursorintelligence.com/product/jenkins/email_extension): 10 vulnerabilities, 121 versions
- [Build Failure Analyzer](https://www.precursorintelligence.com/product/jenkins/build_failure_analyzer): 9 vulnerabilities, 62 versions
- [Active Directory](https://www.precursorintelligence.com/product/jenkins/active_directory): 9 vulnerabilities, 82 versions
- [Config File Provider](https://www.precursorintelligence.com/product/jenkins/config_file_provider): 9 vulnerabilities, 74 versions
- [Configuration As Code](https://www.precursorintelligence.com/product/jenkins/configuration_as_code): 9 vulnerabilities, 69 versions
- [Ns-Nd Integration Performance Publisher](https://www.precursorintelligence.com/product/jenkins/ns-nd_integration_performance_publisher): 8 vulnerabilities, 5 versions
- [Subversion](https://www.precursorintelligence.com/product/jenkins/subversion): 7 vulnerabilities, 107 versions
- [Openid Connect Authentication](https://www.precursorintelligence.com/product/jenkins/openid_connect_authentication): 7 vulnerabilities, 57 versions
- [Kubernetes](https://www.precursorintelligence.com/product/jenkins/kubernetes): 7 vulnerabilities, 82 versions
- [Rundeck](https://www.precursorintelligence.com/product/jenkins/rundeck): 7 vulnerabilities, 46 versions
- [Openshift Deployer](https://www.precursorintelligence.com/product/jenkins/openshift_deployer): 7 vulnerabilities, 7 versions
- [Project Inheritance](https://www.precursorintelligence.com/product/jenkins/project_inheritance): 6 vulnerabilities, 14 versions
- [Amazon Ec2](https://www.precursorintelligence.com/product/jenkins/amazon_ec2): 6 vulnerabilities, 58 versions
- [Warnings Next Generation](https://www.precursorintelligence.com/product/jenkins/warnings_next_generation): 6 vulnerabilities, 90 versions
- [Html Publisher](https://www.precursorintelligence.com/product/jenkins/html_publisher): 6 vulnerabilities, 53 versions
- [SAML Single Sign on](https://www.precursorintelligence.com/product/jenkins/saml_single_sign_on): 6 vulnerabilities, 20 versions
- [Deployment Dashboard](https://www.precursorintelligence.com/product/jenkins/deployment_dashboard): 6 vulnerabilities, 6 versions
- [Azure VM Agents](https://www.precursorintelligence.com/product/jenkins/azure_vm_agents): 6 vulnerabilities, 25 versions
- [Credentials Binding](https://www.precursorintelligence.com/product/jenkins/credentials_binding): 6 vulnerabilities, 33 versions
- [Job Configuration History](https://www.precursorintelligence.com/product/jenkins/job_configuration_history): 6 vulnerabilities, 67 versions
- [Repository Connector](https://www.precursorintelligence.com/product/jenkins/repository_connector): 6 vulnerabilities, 28 versions
- [Gerrit Trigger](https://www.precursorintelligence.com/product/jenkins/gerrit_trigger): 6 vulnerabilities, 79 versions
- [Google Compute Engine](https://www.precursorintelligence.com/product/jenkins/google_compute_engine): 6 vulnerabilities, 36 versions
- [Github Pull Request Builder](https://www.precursorintelligence.com/product/jenkins/github_pull_request_builder): 6 vulnerabilities, 122 versions
- [GitLab](https://www.precursorintelligence.com/product/jenkins/gitlab): 6 vulnerabilities, 122 versions
- [Xebialabs Xl Deploy](https://www.precursorintelligence.com/product/jenkins/xebialabs_xl_deploy): 6 vulnerabilities, 37 versions
- [Openid](https://www.precursorintelligence.com/product/jenkins/openid): 6 vulnerabilities, 16 versions
- [Github Branch Source](https://www.precursorintelligence.com/product/jenkins/github_branch_source): 6 vulnerabilities, 44 versions
- [Electricflow](https://www.precursorintelligence.com/product/jenkins/electricflow): 6 vulnerabilities, 7 versions
- [Pipeline Maven Integration](https://www.precursorintelligence.com/product/jenkins/pipeline_maven_integration): 6 vulnerabilities, 95 versions
- [Wso2 Oauth](https://www.precursorintelligence.com/product/jenkins/wso2_oauth): 5 vulnerabilities, 1 version
- [Chef Sinatra](https://www.precursorintelligence.com/product/jenkins/chef_sinatra): 5 vulnerabilities, 17 versions
- [Git Parameter](https://www.precursorintelligence.com/product/jenkins/git_parameter): 5 vulnerabilities, 36 versions
- [Delphix](https://www.precursorintelligence.com/product/jenkins/delphix): 5 vulnerabilities, 22 versions
- [Cadence Vmanager](https://www.precursorintelligence.com/product/jenkins/cadence_vmanager): 5 vulnerabilities, 37 versions
- [Promoted Builds](https://www.precursorintelligence.com/product/jenkins/promoted_builds): 5 vulnerabilities, 73 versions
- [Publish Over SSH](https://www.precursorintelligence.com/product/jenkins/publish_over_ssh): 5 vulnerabilities, 40 versions
- [Jira](https://www.precursorintelligence.com/product/jenkins/jira): 5 vulnerabilities, 90 versions
- [Aws Codecommit Trigger](https://www.precursorintelligence.com/product/jenkins/aws_codecommit_trigger): 5 vulnerabilities, 1 version
- [GitHub](https://www.precursorintelligence.com/product/jenkins/github): 5 vulnerabilities, 69 versions
- [Hashicorp Vault](https://www.precursorintelligence.com/product/jenkins/hashicorp_vault): 5 vulnerabilities, 24 versions
- [Google Login](https://www.precursorintelligence.com/product/jenkins/google_login): 5 vulnerabilities, 9 versions
- [Junit](https://www.precursorintelligence.com/product/jenkins/junit): 5 vulnerabilities, 85 versions
- [Job and Node Ownership](https://www.precursorintelligence.com/product/jenkins/job_and_node_ownership): 5 vulnerabilities, 17 versions
- [Mabl](https://www.precursorintelligence.com/product/jenkins/mabl): 5 vulnerabilities, 37 versions
- [Mailer](https://www.precursorintelligence.com/product/jenkins/mailer): 5 vulnerabilities, 43 versions
- [Matrix Project](https://www.precursorintelligence.com/product/jenkins/matrix_project): 5 vulnerabilities, 26 versions
- [Mercurial](https://www.precursorintelligence.com/product/jenkins/mercurial): 5 vulnerabilities, 74 versions
- [Azure AD](https://www.precursorintelligence.com/product/jenkins/azure_ad): 5 vulnerabilities, 72 versions
- [FortiFy](https://www.precursorintelligence.com/product/jenkins/fortify): 5 vulnerabilities, 11 versions
- [Neuvector Vulnerability Scanner](https://www.precursorintelligence.com/product/jenkins/neuvector_vulnerability_scanner): 5 vulnerabilities, 26 versions
- [Octoperf Load Testing](https://www.precursorintelligence.com/product/jenkins/octoperf_load_testing): 5 vulnerabilities, 28 versions
- [Extended Choice Parameter](https://www.precursorintelligence.com/product/jenkins/extended_choice_parameter): 5 vulnerabilities, 1 version
- [Support Core](https://www.precursorintelligence.com/product/jenkins/support_core): 5 vulnerabilities, 89 versions
- [Scriptler](https://www.precursorintelligence.com/product/jenkins/scriptler): 5 vulnerabilities, 6 versions
- [Websphere Deployer](https://www.precursorintelligence.com/product/jenkins/websphere_deployer): 5 vulnerabilities, 11 versions
- [Active Choices](https://www.precursorintelligence.com/product/jenkins/active_choices): 5 vulnerabilities, 44 versions
- [Matlab](https://www.precursorintelligence.com/product/jenkins/matlab): 4 vulnerabilities, 2 versions
- [Gogs](https://www.precursorintelligence.com/product/jenkins/gogs): 4 vulnerabilities, 17 versions
- [Subversion Partial Release Manager](https://www.precursorintelligence.com/product/jenkins/subversion_partial_release_manager): 4 vulnerabilities, 1 version
- [Gitlab Authentication](https://www.precursorintelligence.com/product/jenkins/gitlab_authentication): 4 vulnerabilities, 64 versions
- [Deployer Framework](https://www.precursorintelligence.com/product/jenkins/deployer_framework): 4 vulnerabilities, 4 versions
- [Static Analysis Utilities](https://www.precursorintelligence.com/product/jenkins/static_analysis_utilities): 4 vulnerabilities, 97 versions
- [Git Client](https://www.precursorintelligence.com/product/jenkins/git_client): 4 vulnerabilities, 108 versions
- [SSH](https://www.precursorintelligence.com/product/jenkins/ssh): 4 vulnerabilities, 16 versions
- [FortiFy on Demand](https://www.precursorintelligence.com/product/jenkins/fortify_on_demand): 4 vulnerabilities, 38 versions
- [Embeddable Build Status](https://www.precursorintelligence.com/product/jenkins/embeddable_build_status): 4 vulnerabilities, 14 versions
- [S3 Publisher](https://www.precursorintelligence.com/product/jenkins/s3_publisher): 4 vulnerabilities, 43 versions
- [Role-Based Authorization Strategy](https://www.precursorintelligence.com/product/jenkins/role-based_authorization_strategy): 4 vulnerabilities, 30 versions
- [Ansible](https://www.precursorintelligence.com/product/jenkins/ansible): 4 vulnerabilities, 12 versions
- [Bitbucket Branch Source](https://www.precursorintelligence.com/product/jenkins/bitbucket_branch_source): 4 vulnerabilities, 62 versions
- [Requests](https://www.precursorintelligence.com/product/jenkins/requests): 4 vulnerabilities, 22 versions
- [Report Portal](https://www.precursorintelligence.com/product/jenkins/report_portal): 4 vulnerabilities, 4 versions
- [Rapiddeploy](https://www.precursorintelligence.com/product/jenkins/rapiddeploy): 4 vulnerabilities, 19 versions
- [Proxmox](https://www.precursorintelligence.com/product/jenkins/proxmox): 4 vulnerabilities, 10 versions
- [Build-Publisher](https://www.precursorintelligence.com/product/jenkins/build-publisher): 4 vulnerabilities, 20 versions
- [Warnings](https://www.precursorintelligence.com/product/jenkins/warnings): 4 vulnerabilities, 145 versions
- [Vmware Lab Manager Slaves](https://www.precursorintelligence.com/product/jenkins/vmware_lab_manager_slaves): 4 vulnerabilities, 14 versions
- [Paaslane Estimate](https://www.precursorintelligence.com/product/jenkins/paaslane_estimate): 4 vulnerabilities, 1 version
- [P4](https://www.precursorintelligence.com/product/jenkins/p4): 4 vulnerabilities, 111 versions
- [Checkmarx](https://www.precursorintelligence.com/product/jenkins/checkmarx): 4 vulnerabilities, 38 versions
- [Orka by Macstadium](https://www.precursorintelligence.com/product/jenkins/orka_by_macstadium): 4 vulnerabilities, 33 versions
- [Nexus Platform](https://www.precursorintelligence.com/product/jenkins/nexus_platform): 4 vulnerabilities, 1 version
- [Appspider](https://www.precursorintelligence.com/product/jenkins/appspider): 4 vulnerabilities, 15 versions
- [Maven](https://www.precursorintelligence.com/product/jenkins/maven): 4 vulnerabilities, 33 versions
- [Health Advisor by Cloudbees](https://www.precursorintelligence.com/product/jenkins/health_advisor_by_cloudbees): 4 vulnerabilities, 16 versions
- [Team Foundation Server](https://www.precursorintelligence.com/product/jenkins/team_foundation_server): 4 vulnerabilities, 45 versions
- [Compuware Topaz for Total Test](https://www.precursorintelligence.com/product/jenkins/compuware_topaz_for_total_test): 4 vulnerabilities, 34 versions
- [Liquibase Runner](https://www.precursorintelligence.com/product/jenkins/liquibase_runner): 4 vulnerabilities, 25 versions
- [Cons3rt](https://www.precursorintelligence.com/product/jenkins/cons3rt): 4 vulnerabilities, 1 version
- [Continuous Integration with Toad Edge](https://www.precursorintelligence.com/product/jenkins/continuous_integration_with_toad_edge): 4 vulnerabilities, 5 versions
- [Convertigo Mobile Platform](https://www.precursorintelligence.com/product/jenkins/convertigo_mobile_platform): 4 vulnerabilities, 2 versions
- [Team Concert](https://www.precursorintelligence.com/product/jenkins/team_concert): 4 vulnerabilities, 20 versions
- [Kubernetes Continuous Deploy](https://www.precursorintelligence.com/product/jenkins/kubernetes_continuous_deploy): 4 vulnerabilities, 19 versions
- [Kubernetes Ci](https://www.precursorintelligence.com/product/jenkins/kubernetes_ci): 4 vulnerabilities, 5 versions
- [Katalon](https://www.precursorintelligence.com/product/jenkins/katalon): 4 vulnerabilities, 32 versions
- [Coverity](https://www.precursorintelligence.com/product/jenkins/coverity): 4 vulnerabilities, 37 versions
- [Job Import](https://www.precursorintelligence.com/product/jenkins/job_import): 4 vulnerabilities, 15 versions
- [Credentials](https://www.precursorintelligence.com/product/jenkins/credentials): 4 vulnerabilities, 126 versions
- [Jira Pipeline Steps](https://www.precursorintelligence.com/product/jenkins/jira_pipeline_steps): 4 vulnerabilities, 1 version
- [Crx Content Package Deployer](https://www.precursorintelligence.com/product/jenkins/crx_content_package_deployer): 4 vulnerabilities, 24 versions
- [Icescrum](https://www.precursorintelligence.com/product/jenkins/icescrum): 4 vulnerabilities, 23 versions
- [Cloudbees Aws Credentials](https://www.precursorintelligence.com/product/jenkins/cloudbees_aws_credentials): 3 vulnerabilities, 33 versions
- [Cloudbees Cd](https://www.precursorintelligence.com/product/jenkins/cloudbees_cd): 3 vulnerabilities, 24 versions
- [Elasticbox Ci](https://www.precursorintelligence.com/product/jenkins/elasticbox_ci): 3 vulnerabilities, 51 versions
- [Elastest](https://www.precursorintelligence.com/product/jenkins/elastest): 3 vulnerabilities, 6 versions
- [Flaky Test Handler](https://www.precursorintelligence.com/product/jenkins/flaky_test_handler): 3 vulnerabilities, 13 versions
- [Nomad](https://www.precursorintelligence.com/product/jenkins/nomad): 3 vulnerabilities, 24 versions
- [Audit to Database](https://www.precursorintelligence.com/product/jenkins/audit_to_database): 3 vulnerabilities, 5 versions
- [Folders](https://www.precursorintelligence.com/product/jenkins/folders): 3 vulnerabilities, 19 versions
- [Soasta Cloudtest](https://www.precursorintelligence.com/product/jenkins/soasta_cloudtest): 3 vulnerabilities, 22 versions
- [Zephyr for Jira Test Management](https://www.precursorintelligence.com/product/jenkins/zephyr_for_jira_test_management): 3 vulnerabilities, 6 versions
- [Code Coverage API](https://www.precursorintelligence.com/product/jenkins/code_coverage_api): 3 vulnerabilities, 40 versions
- [Self-Organizing Swarm Modules](https://www.precursorintelligence.com/product/jenkins/self-organizing_swarm_modules): 3 vulnerabilities, 53 versions
- [Netsparker Cloud Scan](https://www.precursorintelligence.com/product/jenkins/netsparker_cloud_scan): 3 vulnerabilities, 6 versions
- [Easyqa](https://www.precursorintelligence.com/product/jenkins/easyqa): 3 vulnerabilities, 1 version
- [Aqua Security Scanner](https://www.precursorintelligence.com/product/jenkins/aqua_security_scanner): 3 vulnerabilities, 40 versions
- [Kmap](https://www.precursorintelligence.com/product/jenkins/kmap): 3 vulnerabilities, 1 version
- [Dashboard View](https://www.precursorintelligence.com/product/jenkins/dashboard_view): 3 vulnerabilities, 50 versions
- [Testcomplete Support](https://www.precursorintelligence.com/product/jenkins/testcomplete_support): 3 vulnerabilities, 26 versions
- [Synopsys Coverity](https://www.precursorintelligence.com/product/jenkins/synopsys_coverity): 3 vulnerabilities, 14 versions
- [Dynatrace Application Monitoring](https://www.precursorintelligence.com/product/jenkins/dynatrace_application_monitoring): 3 vulnerabilities, 7 versions
- [Autocomplete Parameter](https://www.precursorintelligence.com/product/jenkins/autocomplete_parameter): 3 vulnerabilities, 2 versions
- [Zephyr Enterprise Test Management](https://www.precursorintelligence.com/product/jenkins/zephyr_enterprise_test_management): 3 vulnerabilities, 14 versions
- [Xpath Configuration Viewer](https://www.precursorintelligence.com/product/jenkins/xpath_configuration_viewer): 3 vulnerabilities, 5 versions
- [Mac](https://www.precursorintelligence.com/product/jenkins/mac): 3 vulnerabilities, 7 versions
- [Dynamic Extended Choice Parameter](https://www.precursorintelligence.com/product/jenkins/dynamic_extended_choice_parameter): 3 vulnerabilities, 2 versions
- [Semantic Versioning](https://www.precursorintelligence.com/product/jenkins/semantic_versioning): 3 vulnerabilities, 12 versions
- [Dotci](https://www.precursorintelligence.com/product/jenkins/dotci): 3 vulnerabilities, 136 versions
- [Lucene-Search](https://www.precursorintelligence.com/product/jenkins/lucene-search): 3 vulnerabilities, 2 versions
- [Recipe](https://www.precursorintelligence.com/product/jenkins/recipe): 3 vulnerabilities, 3 versions
- [Docker](https://www.precursorintelligence.com/product/jenkins/docker): 3 vulnerabilities, 45 versions
- [Relution Enterprise Appstore Publisher](https://www.precursorintelligence.com/product/jenkins/relution_enterprise_appstore_publisher): 3 vulnerabilities, 2 versions
- [Black Duck Hub](https://www.precursorintelligence.com/product/jenkins/black_duck_hub): 3 vulnerabilities, 21 versions
- [Conjur Secrets](https://www.precursorintelligence.com/product/jenkins/conjur_secrets): 3 vulnerabilities, 10 versions
- [Build-Metrics](https://www.precursorintelligence.com/product/jenkins/build-metrics): 3 vulnerabilities, 4 versions
- [Bitbucket Server Integration](https://www.precursorintelligence.com/product/jenkins/bitbucket_server_integration): 3 vulnerabilities, 35 versions
- [Ansible Tower](https://www.precursorintelligence.com/product/jenkins/ansible_tower): 3 vulnerabilities, 19 versions
- [Reverse Proxy Auth](https://www.precursorintelligence.com/product/jenkins/reverse_proxy_auth): 3 vulnerabilities, 15 versions
- [Database](https://www.precursorintelligence.com/product/jenkins/database): 3 vulnerabilities, 9 versions
- [Generic Webhook Trigger](https://www.precursorintelligence.com/product/jenkins/generic_webhook_trigger): 3 vulnerabilities, 85 versions
- [Vsphere](https://www.precursorintelligence.com/product/jenkins/vsphere): 3 vulnerabilities, 44 versions
- [Storable Configs](https://www.precursorintelligence.com/product/jenkins/storable_configs): 3 vulnerabilities, 1 version
- [Bitbucket Oauth](https://www.precursorintelligence.com/product/jenkins/bitbucket_oauth): 3 vulnerabilities, 13 versions
- [Rocketchat Notifier](https://www.precursorintelligence.com/product/jenkins/rocketchat_notifier): 3 vulnerabilities, 43 versions
- [Pipeline Github Notify Step](https://www.precursorintelligence.com/product/jenkins/pipeline_github_notify_step): 3 vulnerabilities, 6 versions

## Questions

### How many vulnerabilities does Jenkins have?

Our catalogue lists 1,665 published vulnerabilities across 695 products and 14,592 versions from Jenkins. The most recent Jenkins flaw added to the known-exploited list is CVE-2017-1000353, on 2 October 2025.

### Which Jenkins vulnerabilities are being exploited?

6 Jenkins vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2017-1000353, CVE-2024-23897 and CVE-2023-44487. The full list is on this page.

### Which Jenkins product has the most vulnerabilities?

Jenkins, with 255 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Jenkins vulnerabilities?

Create a Precursor Intelligence account and track the Jenkins products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Jenkins?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact