Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 16, 2022

CVE-2019-1003029

High
EPSS 92.6%CISA KEV
Jenkins/Script Security Plugin

Description

Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.

EPSS — Exploit Probability

92.6%

Higher than 99.7% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2019-1003029

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
92.6%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Apr 25, 2022

Added to KEV

Apr 25, 2022

Remediation Due

May 16, 2022

Affected Product

Jenkins

Script Security Plugin

View all Jenkins CVEs