CVE-2015-5317
Actively exploited. CVE-2015-5317 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2023-05-12) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.
CSIRTS triage
- What
- There is an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them.
- Who is affected
- Users of Jenkins UI are affected.
- Urgency
- Remediation is urgent due to the critical severity and confirmed exploitation.
- Action
- Users should update to the latest version of Jenkins.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2015-5317
Get an email if CVE-2015-5317 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 97% of all EPSS-scored CVEs.
Advisory coverage (1)
- criticalexploitedCVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerabilitycisa-kev · 2023-05-12
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2015-5317)