vulnerability
Jenkins Advisory 2016-11-16: CVE-2016-9299: Remote code execution vulnerability in remoting module
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Jan 12, 2017 | Nov 13, 2017 | Aug 11, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jan 12, 2017
Added
Nov 13, 2017
Modified
Aug 11, 2025
Description
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
Solutions
jenkins-lts-upgrade-2_19_3jenkins-upgrade-2_32
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.