jenkins build failure analyzer

Name: jenkins build failure analyzer
Brand: jenkins

productUS

cpe:2.3:a:jenkins:build_failure_analyzer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high7medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-4988US	medium6.1	1.23% (69th)	—	1.16.0	2017-02-09	< 1.16.0
CVE-2019-16555US	medium6.5	1.08% (65th)	—	no fix	2019-12-17	≤ 1.24.1
CVE-2019-16554US	medium4.3OT elevated	0.82% (57th)	—	no fix	2019-12-17	≤ 1.24.1
CVE-2020-2244US	medium5.4	0.75% (55th)	—	no fix	2020-09-01	≤ 1.27.0
CVE-2019-16553US	high8.8	0.69% (53rd)	—	no fix	2019-12-17	≤ 1.24.1
CVE-2023-43501US	medium6.5OT elevated	0.61% (49th)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43499US	medium5.4	0.60% (49th)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43500US	high8.8	0.47% (41st)	—	2.4.2	2023-09-20	< 2.4.2
CVE-2023-43502US	medium4.3	0.39% (33rd)	—	2.4.2	2023-09-20	< 2.4.2

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.