Security Digest
Jenkins: known exploited vulnerabilities
2 Jenkins CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-10-02 | CVE-2017-1000353 | Jenkins Jenkins Jenkins Remote Code Execution Vulnerability | 2025-10-23 |
| 2024-08-19 | CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Ransomware | 2024-09-09 |