Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.main:cli

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2025-67635

    Jenkins has a Denial of service vulnerability in HTTP-based CLI

    Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core org.jenkins-ci.main:cli Web / CMS Maven
  • Critical 9.8
    CVE-2015-8103 Public exploit EPSS 92%

    Jenkins CLI Deserialization of Untrusted Data vulnerability

    The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy v…

    org.jenkins-ci.main:cli Maven