Jenkins Project product

Script Security Plugin

← All Jenkins Project products

No CISA KEV deadline is open. CISA last added a Script Security Plugin CVE on 25 Apr 2022.

Tracked since 25 Jun · latest article Thu 17 Sep · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 1 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CSV download

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2019-1003029not in CyberSIXT coverageScript Security Plugin25 Apr 2022Deadline passed 16 May 2022Ransomware: Unknown · 0 articles

Coverage

2 articles · all timeFull timeline →

Two articles so far, 25 Jun to 17 Sep.

1 2

Thu 25 Jun · first reportJenkins patches 22 flaws, warns of RCE via CVE-2026-57281SecurityOnline
Thu 17 SepJenkins Fixes 20 Plugin Flaws Allowing Sandbox Escapes and RCESecurityOnline

See the full timeline

17 SepJenkins Fixes 20 Plugin Flaws Allowing Sandbox Escapes and RCESecurityOnline
25 JunJenkins patches 22 flaws, warns of RCE via CVE-2026-57281SecurityOnline

All CVEs in coverage

CVE-2026-57281Jenkins Project Jenkins Script Security Plugin vulnerabilityCVSS7.5High–Not in KEV0.9%EPSS1article

CVE-2026-92124Jenkins Project Jenkins Script Security Plugin vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article

CVE-2026-92123Jenkins Project Jenkins Script Security Plugin vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article

CVE-2026-92122Jenkins Project Jenkins Script Security Plugin vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article

CVE-2026-92125Jenkins Project Jenkins Script Security Plugin vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Script Security Plugin

Exploited, by due date

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts