Contact us
Vulnerability lookup

CVE-2016-0788

critical CVSS 9.8 EPSS 11.8%

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Versions it affects

Software versions checked with the free lookup that CVE-2016-0788 applies to, and the release that fixes it where the sources name one.

At a glance

Severity
Critical
CVSS base score
9.8 out of 10
Known exploited
Not in CISA's catalogue of exploited vulnerabilities
EPSS
11.8% probability of exploitation in the next 30 days, higher than 96% of scored vulnerabilities
Weakness
CWE-264
Published
2016-04-07

Is this running somewhere in your estate?

The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.