jenkins pipeline: groovy

Name: jenkins pipeline: groovy
Brand: jenkins

productUS

cpe:2.3:a:jenkins:pipeline\:_groovy:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical6high2medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1003030US	critical9.9OT critical	97.1% (100th)	KEV	no fix	2019-03-08	≤ 2.63
CVE-2019-1003001US	high8.8	86.1% (100th)	Exploit	no fix	2019-01-22	≤ 2.61
CVE-2022-25173US	high8.8	1.44% (73rd)	Exploit	no fix	2022-02-15	≤ 2648.va9433432b33c
CVE-2024-52550US	—	0.46% (39th)	Exploit	3975.3977.v478dd9e956c3	2024-11-13	2 versions
CVE-2019-1003041US	critical9.8	3.43% (89th)	—	no fix	2019-03-28	≤ 2.64
CVE-2022-25176US	medium6.5	1.74% (78th)	—	no fix	2022-02-15	≤ 2648.va9433432b33c
CVE-2018-1000866US	high8.8	1.64% (76th)	—	no fix	2018-12-10	≤ 2.59
CVE-2017-1000096US	high8.8	1.61% (76th)	—	no fix	2017-10-05	≤ 2.36
CVE-2022-43402US	critical9.9	1.47% (74th)	—	no fix	2022-10-19	≤ 2802.v5ea_628154b_c2
CVE-2022-30945US	high8.5	1.42% (73rd)	—	2689.v434009a_31b_f1	2022-05-17	< 2689.v434009a_31b_f1
CVE-2020-2109US	high8.8	1.26% (69th)	—	no fix	2020-02-12	≤ 2.78
CVE-2022-25180US	medium4.3OT elevated	0.53% (44th)	—	no fix	2022-02-15	≤ 2648.va9433432b33c
CVE-2026-57284US	—	0.34% (27th)	—	no fix	2026-06-24	≤ 4331.v9d06ed4658ff
CVE-2026-57283US	—	0.24% (15th)	—	no fix	2026-06-24	≤ 4331.v9d06ed4658ff

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-184Incomplete List of Disallowed Inputs1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.