Several products
← All Jenkins Project products
No CISA KEV deadline is open. CISA last added a Several products CVE on 2 Oct 2025.
Tracked since 11 Jun · latest article Thu 3 Sep · RSS
Exploited, by due date
CSV downloadDeadlines passed
4 articles from 1 outlet since 11 Jun; the latest 53 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 3 Sep · 02:36 UTC | SecurityOnline | Jenkins Patches RCE Flaw and 30+ Vulnerabilities |
| Thu 6 Aug · 03:21 UTC | SecurityOnline | Critical Jenkins flaw lets attackers bypass filter for RCE |
| Mon 15 Jun · 10:50 UTC | SecurityOnline | Attackers exploit Jenkins flaw to execute code through config.xml |
| Thu 11 Jun · 04:22 UTC | SecurityOnline | Jenkins advisory flags critical deserialization flaw and bugs |
All CVEs in coverage
10How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.