[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwVqWx0XhCT7AnINQBlVxz68NnLM8kR-5ftXVaYX9FAA":3,"g5a-risk:CVE-2019-1003030":168},{"success":4,"data":5,"meta":166},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":97,"weaknesses":98,"weaknessesCount":107,"isActivelyExploited":4,"cisaInfo":108,"otxData":27,"relatedBlogPosts":109,"seoMetadata":110,"configurations":135,"relatedVendorCves":150,"notableEvents":151},"CVE-2019-1003030","What is CVE-2019-1003030?","A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fworkflow\u002Fcps\u002FCpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.","A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fworkflow\u002Fcps\u002FCpsGro...","2019-03-08T21:29:00.343","2025-10-24T20:48:13.233",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":47,"ObtainAllPrivilege":47,"ObtainUserPrivilege":47,"ObtainOtherPrivilege":47,"UserInteractionRequired":47},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":40,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":43,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"","MEDIUM",8,6.4,false,0.97058,[48,48,48,48,48,48,48],"Critical",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"jenkins","pipeline\\","_groovy","cpe:2.3:a:jenkins:pipeline\\:_groovy:*:*:*:*:*:jenkins:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",2,[64,71,76,80,84,86,88,90,92],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F159603\u002FJenkins-2.63-Sandbox-Bypass.html","Packetstormsecurity",[68,69,70],"Exploit","Third Party Advisory","VDB Entry",{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107476","Securityfocus",[75,69,70],"Broken Link",{"url":77,"source":78,"tags":79},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0739","Red Hat",[69],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fjenkins.io\u002Fsecurity\u002Fadvisory\u002F2019-03-06\u002F#SECURITY-1336%20%282%29","Jenkins",[69],{"url":65,"source":66,"tags":85},[68,69,70],{"url":72,"source":73,"tags":87},[75,69,70],{"url":77,"source":78,"tags":89},[69],{"url":81,"source":82,"tags":91},[69],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1003030","CISA",[96],"US Government Resource",9,[99],{"id":100,"name":101,"description":102,"extendedDescription":103,"status":104,"abstraction":105,"structure":106},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":27},[],{"title":111,"metaDescription":112,"keywords":113,"canonicalUrl":114,"structuredData":115},"What is CVE-2019-1003030? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-1003030, a critical severity cyber security vulnerability from 2019. High exploit probability (97.1%). A sandbox bypass vu...","CVE-2019-1003030, CVE-2019-1003030 vulnerability, CVE-2019-1003030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, jenkins security, redhat security, pipeline\\ vulnerability, openshift_container_platform vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-1003030",{"@context":116,"@type":117,"headline":111,"description":112,"datePublished":10,"dateModified":11,"author":118,"publisher":122,"about":126,"mainEntityOfPage":130,"articleSection":133,"keywords":134},"https:\u002F\u002Fschema.org","TechArticle",{"@type":119,"name":120,"url":121},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":119,"name":120,"url":121,"logo":123},{"@type":124,"url":125},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":127,"name":6,"description":128,"additionalType":129},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":131,"@id":132},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-1003030","Cybersecurity","CVE-2019-1003030, CVE-2019-1003030 vulnerability, CVE-2019-1003030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[136,144],{"Operator":27,"Negate":27,"Nodes":137},[138],{"Operator":139,"Negate":47,"CPEMatch":140},"OR",[141],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":143},"081CE952-CEA0-4B3E-9D4F-2C1D1A8E676A","2.63",{"Operator":27,"Negate":27,"Nodes":145},[146],{"Operator":139,"Negate":47,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2F87326E-0B56-4356-A889-73D026DB1D4B",[],[152,159],{"id":153,"eventType":154,"eventTime":155,"details":156,"label":157,"color":158},"700f9bca-b3c8-401d-9d25-7e51586191f7","LOW_EPSS_DELTA","2026-06-16T04:06:08.424738+00:00","Daily EPSS score decreased by 0.159 on 2023-12-30","EPSS Score Decreased","green",{"id":160,"eventType":161,"eventTime":162,"details":163,"label":164,"color":165},"d9e58bfc-1da4-4c60-aafd-714a128e96bf","HIGH_EPSS_DELTA","2026-08-20T04:08:11.697583+00:00","Daily EPSS score increased by 0.213 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":167,"version":38},1793204636372,{"score":169,"band":50,"action":170,"scoredAt":171},90,"Emergency patch","2026-10-28T06:45:37.849412+00:00"]