Medium (6.5) in jenkins monitoring. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.jvnet.hudson.plugins:monitoring 1.75.0.
A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.
Severity
CVSS 3.0
6.5 medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)