Low severityNVD Advisory· Published Oct 16, 2015· Updated Jun 17, 2026

CVE-2015-1808

Description

Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-coreMaven	>= 1.597, < 1.600	1.600
org.jenkins-ci.main:jenkins-coreMaven	< 1.596.1	1.596.1

Affected products

Jenkins Project/Jenkins2 versions
cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*range: <=1.599
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*range: <=1.580.3
Red Hat/Openshift
cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*
Range: <=3.1
ghsa-coords
pkg:maven/org.jenkins-ci.main/jenkins-core
Range: >= 1.597, < 1.600

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-3rwx-3vwh-mwxcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-1808ghsaADVISORY
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27nvdVendor AdvisoryWEB
rhn.redhat.com/errata/RHSA-2015-1844.htmlnvdWEB
access.redhat.com/errata/RHSA-2016:0070nvdWEB
bugzilla.redhat.com/show_bug.cginvdWEB

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000