Lookup for vulnerable packages by Package URL.
| Purl | pkg:maven/org.jenkins-ci.main/jenkins-core@1.596.1 |
| Type | maven |
| Namespace | org.jenkins-ci.main |
| Name | jenkins-core |
| Version | 1.596.1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 1.596.2 |
| Latest_non_vulnerable_version | 2.555 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-88ku-rdqg-nfdm |
| vulnerability_id |
VCID-88ku-rdqg-nfdm |
| summary |
Jenkins allows for Privilege Escalation by Remote Authenticated Users
The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1806 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70583 |
| published_at |
2026-04-18T12:55:00Z |
|
| 1 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.7048 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70498 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70475 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70521 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70536 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.7056 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70545 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70531 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70575 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00639 |
| scoring_system |
epss |
| scoring_elements |
0.70467 |
| published_at |
2026-04-01T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1806 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1806, GHSA-mm9c-4cv4-7rfv
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-88ku-rdqg-nfdm |
|
| 1 |
| url |
VCID-dmb6-hwan-nqfn |
| vulnerability_id |
VCID-dmb6-hwan-nqfn |
| summary |
XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1811 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.3175 |
| published_at |
2026-04-18T12:55:00Z |
|
| 1 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31729 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31781 |
| published_at |
2026-04-08T12:55:00Z |
|
| 3 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31811 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31814 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31774 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31739 |
| published_at |
2026-04-13T12:55:00Z |
|
| 7 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31771 |
| published_at |
2026-04-16T12:55:00Z |
|
| 8 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31734 |
| published_at |
2026-04-01T12:55:00Z |
|
| 9 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.31866 |
| published_at |
2026-04-02T12:55:00Z |
|
| 10 |
| value |
0.00125 |
| scoring_system |
epss |
| scoring_elements |
0.3191 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1811 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1811, GHSA-qg7x-4h4q-3m49
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dmb6-hwan-nqfn |
|
| 2 |
| url |
VCID-tryk-6hhf-8ufh |
| vulnerability_id |
VCID-tryk-6hhf-8ufh |
| summary |
XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1809 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32711 |
| published_at |
2026-04-08T12:55:00Z |
|
| 1 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.3269 |
| published_at |
2026-04-18T12:55:00Z |
|
| 2 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32713 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32702 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32663 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32737 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32674 |
| published_at |
2026-04-13T12:55:00Z |
|
| 7 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32806 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32738 |
| published_at |
2026-04-11T12:55:00Z |
|
| 9 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32842 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1809 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1809, GHSA-qj27-w92h-fc9r
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tryk-6hhf-8ufh |
|
| 3 |
| url |
VCID-z2s1-ncs9-vfet |
| vulnerability_id |
VCID-z2s1-ncs9-vfet |
| summary |
Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation
The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1810 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62804 |
| published_at |
2026-04-18T12:55:00Z |
|
| 1 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62707 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62738 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62703 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62754 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62771 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62789 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62779 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62756 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62796 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.62649 |
| published_at |
2026-04-01T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1810 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1810, GHSA-37wm-28rm-56vw
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z2s1-ncs9-vfet |
|
| 4 |
| url |
VCID-zz2q-h9gc-p7h4 |
| vulnerability_id |
VCID-zz2q-h9gc-p7h4 |
| summary |
Jenkins Vulnerable to Denial of Service (DoS)
Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1808 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38983 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38837 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.3897 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.3899 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.3892 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38973 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38988 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.39 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38963 |
| published_at |
2026-04-18T12:55:00Z |
|
| 9 |
| value |
0.00175 |
| scoring_system |
epss |
| scoring_elements |
0.38935 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2015-1808 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2015-1808, GHSA-3rwx-3vwh-mwxc
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zz2q-h9gc-p7h4 |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.596.1 |