Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8umn-p534-x7e1
Vulnerability ID VCID-8umn-p534-x7e1
Aliases CVE-2014-3681
GHSA-cwh9-f8m6-6r63
Summary Jenkins Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE https://access.redhat.com/errata/RHBA-2014:1630
generic_textual MODERATE https://access.redhat.com/errata/RHSA-2016:0070
generic_textual MODERATE https://access.redhat.com/security/cve/CVE-2014-3681
epss 0.00249 https://api.first.org/data/v1/epss?cve=CVE-2014-3681
generic_textual MODERATE https://bugzilla.redhat.com/show_bug.cgi?id=1147766
generic_textual MODERATE https://exchange.xforce.ibmcloud.com/vulnerabilities/96975
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2014-3681
generic_textual MODERATE https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
Reference id Reference type URL
https://access.redhat.com/errata/RHBA-2014:1630
https://access.redhat.com/errata/RHSA-2016:0070
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3681.json
https://access.redhat.com/security/cve/CVE-2014-3681
https://api.first.org/data/v1/epss?cve=CVE-2014-3681
https://bugzilla.redhat.com/show_bug.cgi?id=1147766
https://exchange.xforce.ibmcloud.com/vulnerabilities/96975
https://nvd.nist.gov/vuln/detail/CVE-2014-3681
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
GHSA-cwh9-f8m6-6r63 https://github.com/advisories/GHSA-cwh9-f8m6-6r63
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.48342
EPSS Score 0.00249
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T09:36:05.491082+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cwh9-f8m6-6r63/GHSA-cwh9-f8m6-6r63.json 38.6.0