CVE-2016-0788
critical
CVSS 9.8
EPSS 11.8%
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
Versions it affects
Software versions checked with the free lookup that CVE-2016-0788 applies to, and the release that fixes it where the sources name one.
Is this running somewhere in your estate?
The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.