Jenkins Project Jenkins Pipeline: Groovy Plugin

Name: Jenkins Project Jenkins Pipeline: Groovy Plugin
Brand: Jenkins Project

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical3high2medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1003030US	critical9.9OT critical	97.1% (100th)	KEV	no fix	2019-03-08	≤ 2.63 and earlier
CVE-2022-25173US	high8.8	1.44% (73rd)	Exploit	no fix	2022-02-15	≤ unspecified ≤2648.va9433432b33c
CVE-2024-52550US	—	0.46% (39th)	Exploit	no fix	2024-11-13	2 versions
CVE-2019-1003041US	critical9.8	3.43% (89th)	—	no fix	2019-03-28	≤ 2.64 and earlier
CVE-2022-25176US	medium6.5	1.74% (78th)	—	no fix	2022-02-15	≤ unspecified ≤2648.va9433432b33c
CVE-2022-43402US	critical9.9	1.47% (74th)	—	no fix	2022-10-19	≤ unspecified ≤2802.v5ea_628154b_c2
CVE-2022-30945US	high8.5	1.42% (73rd)	—	no fix	2022-05-17	≤ unspecified ≤2689.v434009a_31b_f1
CVE-2020-2109US	high8.8	1.26% (69th)	—	no fix	2020-02-12	≤ unspecified ≤2.78
CVE-2022-25180US	medium4.3OT elevated	0.53% (45th)	—	no fix	2022-02-15	≤ unspecified ≤2648.va9433432b33c
CVE-2026-57284US	—	0.34% (27th)	—	no fix	2026-06-24	≤ 0 ≤4331.v9d06ed4658ff
CVE-2026-57283US	—	0.24% (15th)	—	no fix	2026-06-24	≤ 0 ≤4331.v9d06ed4658ff

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-285Improper Authorization1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-354Improper Validation of Integrity Check Value1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.