Weakness (CWE)

CWE-693: Protection Mechanism Failure

Pillar Draft Mapping discouraged

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Source: MITRE CWE-693

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.9

CVE-2019-1003029 Exploited Public exploit EPSS 74%

Sandbox bypass in Script Security Plugin

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

Mar 8, 2019
KEV Apr 25, 2022
Critical 9.9

CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

Sandbox bypass in Jenkins Pipeline: Groovy Plugin

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven

Mar 8, 2019
KEV Mar 25, 2022
Critical 9.8

CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

Jun 18, 2013
KEV Mar 28, 2022