Jenkins Project Jenkins Script Security Plugin

Name: Jenkins Project Jenkins Script Security Plugin
Brand: Jenkins Project

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical10high6medium0low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1003029US	critical9.9OT critical	74.4% (99th)	KEV	no fix	2019-03-08	≤ 1.53 and earlier
CVE-2024-34144US	—	48.4% (99th)	Exploit	no fix	2024-05-02	≤ 0 ≤1335.vf07d9ce377a_e
CVE-2019-1003005US	high8.8	19.5% (97th)	Exploit	no fix	2019-02-06	≤ 1.50 and earlier
CVE-2023-24422US	high8.8	0.58% (48th)	Exploit	1175.1180.v36a_3fb_2dec9c	2023-01-26	2 versions
CVE-2019-1003040US	critical9.8	3.43% (89th)	—	no fix	2019-03-28	≤ 1.55 and earlier
CVE-2019-1003024US	high8.8	3.05% (87th)	—	no fix	2019-02-20	≤ 1.52 and earlier
CVE-2019-10431US	critical9.9	2.75% (86th)	—	no fix	2019-10-01	≤ 1.64 and earlier
CVE-2019-10356US	high8.8	2.50% (85th)	—	no fix	2019-07-31	≤ 1.61 and earlier
CVE-2019-10355US	high8.8	2.50% (85th)	—	no fix	2019-07-31	≤ 1.61 and earlier
CVE-2020-2279US	critical9.9	2.13% (82nd)	—	no fix	2020-09-23	≤ unspecified ≤1.74
CVE-2022-43403US	critical9.9	1.89% (79th)	—	no fix	2022-10-19	≤ unspecified ≤1183.v774b_0b_0a_a_451
CVE-2022-43401US	critical9.9	1.54% (75th)	—	no fix	2022-10-19	≤ unspecified ≤1183.v774b_0b_0a_a_451
CVE-2019-16538US	high8.8OT elevated	1.42% (73rd)	—	no fix	2019-11-21	≤ 1.67 and earlier
CVE-2022-43404US	critical9.9	1.39% (72nd)	—	no fix	2022-10-19	≤ unspecified ≤1183.v774b_0b_0a_a_451
CVE-2020-2110US	high8.8	1.26% (69th)	—	no fix	2020-02-12	≤ unspecified ≤1.69
CVE-2019-10400US	medium4.2	1.04% (64th)	—	no fix	2019-09-12	≤ 1.62 and earlier
CVE-2019-10399US	medium4.2	1.04% (64th)	—	no fix	2019-09-12	≤ 1.62 and earlier
CVE-2019-10394US	medium4.2	1.04% (64th)	—	no fix	2019-09-12	≤ 1.62 and earlier
CVE-2019-10393US	medium4.2	1.04% (64th)	—	no fix	2019-09-12	≤ 1.62 and earlier
CVE-2020-2135US	high8.8OT elevated	1.01% (63rd)	—	no fix	2020-03-09	≤ unspecified ≤1.70
CVE-2020-2134US	high8.8OT elevated	1.01% (63rd)	—	no fix	2020-03-09	≤ unspecified ≤1.70
CVE-2024-34145US	—	1.00% (63rd)	—	no fix	2024-05-02	≤ 0 ≤1335.vf07d9ce377a_e
CVE-2026-57281US	—	0.92% (60th)	—	no fix	2026-06-24	≤ 0 ≤1402.v94c9ce464861
CVE-2020-2190US	medium5.4	0.75% (55th)	—	no fix	2020-06-03	≤ unspecified ≤1.72
CVE-2022-30946US	medium4.3	0.65% (51st)	—	no fix	2022-05-17	≤ unspecified ≤1158.v7c1b_73a_69a_08
CVE-2026-57280US	—	0.51% (43rd)	—	no fix	2026-06-24	≤ 0 ≤1402.v94c9ce464861
CVE-2022-45379US	high7.5	0.51% (43rd)	—	no fix	2022-11-15	≤ unspecified ≤1189.vb_a_b_7c8fd5fde
CVE-2024-52549US	—OT elevated	0.35% (29th)	—	no fix	2024-11-13	3 versions
CVE-2026-42519US	—OT elevated	0.17% (7th)	—	no fix	2026-04-29	≤ 0 ≤1399.ve6a_66547f6e1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-693Protection Mechanism Failure11 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')8 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')3 CVEs
CWE-254CWE-2542 CVEs
CWE-704Incorrect Type Conversion or Cast2 CVEs
CWE-862Missing Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan