Jenkins Job Import Plugin (Jenkins Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-27. Vendor: Jenkins Project.

CVEs of Jenkins Job Import Plugin

• CVE-2026-48926 - CVSS 4.3 (medium), 2026-05-27: Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read…
• CVE-2022-43413 - CVSS 4.3 (medium), 2022-10-19: Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to…
• CVE-2019-1003017 - CVSS 5.3 (medium), 2019-02-06: A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a…
• CVE-2019-1003016 - CVSS 8.8 (high), 2019-02-06: An exposure of sensitive information vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in…
• CVE-2019-1003015 - CVSS 9.1 (critical), 2019-02-06: An XML external entity processing vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in…