jenkins support core

Name: jenkins support core
Brand: jenkins

productUS

cpe:2.3:a:jenkins:support_core:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high5medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-16540US	medium6.5	1.61% (76th)	—	no fix	2019-11-21	≤ 2.63
CVE-2021-21621US	medium5.3	1.21% (68th)	—	no fix	2021-02-24	≤ 2.72
CVE-2022-25187US	medium6.5OT elevated	0.97% (62nd)	—	no fix	2022-02-15	≤ 2.79
CVE-2022-45383US	medium6.5OT elevated	0.72% (54th)	—	1206.1208.v9b_7a_1d48db_0f	2022-11-15	< 1206.1208.v9b_7a_1d48db_0f
CVE-2019-16539US	medium6.5	0.71% (54th)	—	no fix	2019-11-21	≤ 2.63

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.