Maven org.jenkins-ci.plugins:script-security

Name: Maven org.jenkins-ci.plugins:script-security
Brand: Maven

productUS

pkg:maven/org.jenkins-ci.plugins/script-security

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

7critical16high8medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1003029US	critical9.9OT critical	74.4% (99th)	KEV	1.54	2019-03-08	< 1.54
CVE-2019-1003000US	high8.8	98.4% (100th)	Exploit	1.50	2019-01-22	< 1.50
CVE-2019-1003001US	high8.8	86.1% (100th)	Exploit	1.50	2019-01-22	< 1.50
CVE-2024-34144US	—	48.4% (99th)	Exploit	1336.vf33a	2024-05-02	< 1336.vf33a
CVE-2019-1003005US	high8.8	19.5% (97th)	Exploit	1.51	2019-02-06	< 1.51
CVE-2023-24422US	high8.8	0.58% (48th)	Exploit	1229.v4880b	2023-01-26	< 1229.v4880b
CVE-2019-1003040US	critical9.8	3.43% (89th)	—	1.56	2019-03-28	< 1.56
CVE-2019-1003024US	high8.8	3.05% (87th)	—	1.53	2019-02-20	< 1.53
CVE-2019-10431US	critical9.9	2.75% (86th)	—	1.65	2019-10-01	< 1.65
CVE-2019-10356US	high8.8	2.50% (85th)	—	1.62	2019-07-31	< 1.62
CVE-2019-10355US	high8.8	2.50% (85th)	—	1.62	2019-07-31	< 1.62
CVE-2020-2279US	critical9.9	2.13% (82nd)	—	1.75	2020-09-23	2 versions
CVE-2022-43403US	critical9.9	1.89% (79th)	—	1184.v85d16b_d851b_3	2022-10-19	< 1184.v85d16b_d851b_3
CVE-2016-3102US	high7.3	1.77% (78th)	—	1.18.1	2017-02-09	< 1.18.1
CVE-2018-1000866US	high8.8	1.64% (76th)	—	1.48	2018-12-10	< 1.48
CVE-2018-1000865US	high8.8	1.64% (76th)	—	1.48	2018-12-10	< 1.48
CVE-2022-43401US	critical9.9	1.54% (75th)	—	1184.v85d16b_d851b_3	2022-10-19	< 1184.v85d16b_d851b_3
CVE-2019-16538US	high8.8OT elevated	1.42% (73rd)	—	1.68	2019-11-21	< 1.68
CVE-2022-43404US	critical9.9	1.39% (72nd)	—	1184.v85d16b_d851b_3	2022-10-19	< 1184.v85d16b_d851b_3
CVE-2020-2110US	high8.8	1.26% (69th)	—	1.70	2020-02-12	< 1.70
CVE-2017-1000107US	high8.8	1.20% (68th)	—	1.31	2017-10-05	< 1.31
CVE-2019-10400US	medium4.2	1.04% (64th)	—	1.63	2019-09-12	< 1.63
CVE-2019-10399US	medium4.2	1.04% (64th)	—	1.63	2019-09-12	< 1.63
CVE-2019-10394US	medium4.2	1.04% (64th)	—	1.63	2019-09-12	< 1.63
CVE-2019-10393US	medium4.2	1.04% (64th)	—	1.63	2019-09-12	< 1.63
CVE-2020-2135US	high8.8OT elevated	1.01% (63rd)	—	1.71	2020-03-09	< 1.71
CVE-2020-2134US	high8.8OT elevated	1.01% (63rd)	—	1.7.1	2020-03-09	< 1.7.1
CVE-2024-34145US	—	1.00% (63rd)	—	1336.vf33a	2024-05-02	< 1336.vf33a
CVE-2017-1000505US	medium6.5	0.99% (62nd)	—	1.37	2018-01-25	< 1.37
CVE-2026-57281US	—	0.92% (60th)	—	1402.1405.vc96e74964250	2026-06-24	< 1402.1405.vc96e74964250
CVE-2017-1000095US	medium6.5	0.82% (57th)	—	1.29.1	2017-10-05	< 1.29.1
CVE-2020-2190US	medium5.4	0.75% (55th)	—	1.73	2020-06-03	< 1.73
CVE-2022-30946US	medium4.3	0.65% (51st)	—	1172.v35f6a	2022-05-17	< 1172.v35f6a
CVE-2026-57280US	—	0.51% (43rd)	—	1402.1405.vc96e74964250	2026-06-24	< 1402.1405.vc96e74964250
CVE-2022-45379US	high7.5	0.51% (43rd)	—	1190.v65867a_a_47126	2022-11-15	< 1190.v65867a_a_47126
CVE-2024-52549US	—OT elevated	0.35% (29th)	—	1368.vb	2024-11-13	< 1368.vb
CVE-2026-42519US	—OT elevated	0.17% (7th)	—	1402.v94c9ce464861	2026-04-29	< 1402.v94c9ce464861

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-693Protection Mechanism Failure12 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')8 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-254CWE-2543 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')3 CVEs
CWE-704Incorrect Type Conversion or Cast2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan