Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkins | Dec 10, 2025 | May 3, 2013 |
| Jenkins 2013 05 02 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.509.1Upgrade Jenkins to version 1.514Upgrade Jenkins LTS to the latest version | Nov 13, 2017 | Apr 10, 2014 |
| Redhat Openshift | — | Upgrade jenkins | Oct 8, 2019 | Apr 10, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub