Jenkins
CISA 가 실제 악용을 확인해 등재한 Jenkins 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2017-1000353Jenkins Remote Code Execution Vulnerability99.7%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2024-23897Jenkins Command Line Interface (CLI) Path Traversal Vulnerability100.0%심각9.8● 실제 악용이 확인됨CVE-2015-5317Jenkins User Interface (UI) Information Disclosure Vulnerability23.0%높음7.5● 실제 악용이 확인됨CVE-2019-1003029Jenkins Script Security Plugin Sandbox Bypass Vulnerability74.4%심각9.9● 실제 악용이 확인됨CVE-2019-1003030Jenkins Matrix Project Plugin Remote Code Execution Vulnerability97.1%심각9.9● 실제 악용이 확인됨CVE-2018-1000861Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability98.3%심각9.8
등재된 제품
6종
Jenkins 1Jenkins Command Line Interface (CLI) 1Jenkins User Interface (UI) 1Script Security Plugin 1Matrix Project Plugin 1Jenkins Stapler Web Framework 1
전체 목록
Jenkins · 6건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2017-1000353 | 2025-10-02 | Jenkins | Jenkins Remote Code Execution Vulnerability | 99.7% | 심각9.8 | 2025-10-23 |
| CVE-2024-23897 랜섬웨어 악용 | 2024-08-19 | Jenkins Command Line Interface (CLI) | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 100.0% | 심각9.8 | 2024-09-09 |
| CVE-2015-5317 | 2023-05-12 | Jenkins User Interface (UI) | Jenkins User Interface (UI) Information Disclosure Vulnerability | 23.0% | 높음7.5 | 2023-06-02 |
| CVE-2019-1003029 | 2022-04-25 | Script Security Plugin | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 74.4% | 심각9.9 | 2022-05-16 |
| CVE-2019-1003030 | 2022-03-25 | Matrix Project Plugin | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 97.1% | 심각9.9 | 2022-04-15 |
| CVE-2018-1000861 | 2022-02-10 | Jenkins Stapler Web Framework | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulner… | 98.3% | 심각9.8 | 2022-08-10 |