Jenkins Security Advisory 2021-11-04

CSIRTS triage

What

Multiple vulnerabilities exist in Jenkins Core and the Subversion plugin.

Who is affected

Deployments of Jenkins Core and the Subversion plugin are affected.

Urgency

Remediation is necessary as vulnerabilities exist, although exploitation status is currently unknown.

Action

Update to the latest versions of Jenkins Core and the Subversion plugin.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

Jenkins Security Advisories (INTL · vendor-psirt · site)

Severity

unknown

Published

2021-11-04

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.jenkins.io/security/advisory/2021-11-04/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Moderate exploitation riskCVE-2021-216851.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 71% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216861.9% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 78% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216871.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 69% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216881.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 68% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216891.4% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 70% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216902.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 83% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216912.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 79% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216922.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 79% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216931.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 72% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2021-216941.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 72% of all EPSS-scored CVEs.

Referenced CVEs

More from Jenkins Security Advisories

• unknownJenkins Security Advisory 2026-08-052026-08-05
• unknownJenkins Security Advisory 2026-06-242026-06-24
• unknownJenkins Security Advisory 2026-06-102026-06-10
• unknownJenkins Security Advisory 2026-05-272026-05-27
• unknownJenkins Security Advisory 2026-04-292026-04-29