boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Jenkins Project

Vendor reference — Jenkins Project · sector: Other. Cumulative disclosure record across the archive.

Follow Jenkins Project — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs129126
KEV entries30
Rate & severity
KEV/100Med CVSSMed EPSSCHML
2.35.4.0031440805

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▆▁▄█▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-120
2026-010
2026-020
2026-031
2026-040
2026-0513
2026-0636
2026-070
2026-0823
2026-0953
2026-100

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2024-238979.8100.0CRITICALYES2024-01-24
CVE-2019-10030309.999.9CRITICALYES2019-03-08
CVE-2019-10030299.999.5CRITICALYES2019-03-08
CVE-2026-534358.881.6HIGH—2026-06-10
CVE-2026-330018.866.6HIGH—2026-03-18
CVE-2026-846757.466.0HIGH—2026-09-02
CVE-2026-572817.559.0HIGH—2026-06-24
CVE-2026-572968.856.2HIGH—2026-06-24
CVE-2026-846718.856.2HIGH—2026-09-02
CVE-2026-921378.856.2HIGH—2026-09-16
CVE-2026-846458.854.7HIGH—2026-09-02
CVE-2026-534374.350.8MEDIUM—2026-06-10
CVE-2026-704318.848.8HIGH—2026-08-05
CVE-2026-846708.848.8HIGH—2026-09-02
CVE-2026-921228.848.5HIGH—2026-09-16

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-921268.548.0HIGH—2026-09-16
CVE-2026-921414.323.4MEDIUM—2026-09-16
CVE-2026-921406.835.1MEDIUM—2026-09-16
CVE-2026-921396.514.7MEDIUM—2026-09-16
CVE-2026-921384.21.2MEDIUM—2026-09-16
CVE-2026-921368.033.4HIGH—2026-09-16
CVE-2026-921378.856.2HIGH—2026-09-16
CVE-2026-921358.033.4HIGH—2026-09-16
CVE-2026-921348.033.4HIGH—2026-09-16
CVE-2026-921335.412.6MEDIUM—2026-09-16
CVE-2026-921325.415.0MEDIUM—2026-09-16
CVE-2026-921314.212.5MEDIUM—2026-09-16
CVE-2026-921303.111.5LOW—2026-09-16
CVE-2026-921297.539.5HIGH—2026-09-16
CVE-2026-921287.519.8HIGH—2026-09-16

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
Jenkins281
Jenkins Script Security Plugin131
Jenkins Gitee Plugin40
Jenkins Active Directory Plugin30
Jenkins Assembla Plugin30
Jenkins Contrast Continuous Application Security Plugin30
Jenkins LDAP Plugin30
Jenkins Multijob Plugin30
Jenkins Pipeline: Groovy Libraries Plugin30
Jenkins Pipeline: Groovy Plugin31
Jenkins Bitbucket Push And Pull Request Plugin20
Jenkins EC2 Fleet Plugin20
Jenkins External Workspace Manager Plugin20
Jenkins GitLab Plugin20
Jenkins Job Configuration History Plugin20
Jenkins Parameterized Remote Trigger Plugin20
Jenkins Pipeline: Build Step Plugin20
Jenkins SCM-Manager Plugin20
Jenkins Zowe ZDevOps Plugin20

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2024-238972024-08-199.8100.0CRITICAL
CVE-2019-10030292022-04-259.999.5CRITICAL
CVE-2019-10030302022-03-259.999.9CRITICAL

KEV timing

Fastest to KEV
CVEDays
CVE-2024-23897208
CVE-2019-10030301113
CVE-2019-10030291144
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2019-10030302022-04-151633
CVE-2019-10030292022-05-161602
CVE-2024-238972024-09-09755

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.