Jenkins Active Directory vulnerabilities

• jenkins active directory, jenkins project active directory plugin +1 more Jenkins Active Directory Plugin has an LDAP injection vulnerability CVE-2026-57288 Fix available 3.7 LowJune 24, 2026
• jenkins active directory, jenkins project active directory plugin +1 more Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation CVE-2026-48919 Fix available 6.6 MediumMay 27, 2026
• jenkins active directory, jenkins project active directory plugin +1 more Jenkins Active Directory Plugin follows LDAP referrals by default CVE-2026-48918 Fix available 6.6 MediumMay 27, 2026
• jenkins active directory, jenkins project active directory plugin +1 more Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure CVE-2023-37943 Fix available 5.9 MediumJuly 12, 2023
• jenkins active directory, jenkins project active directory plugin +1 more User passwords transmitted in plain text by Jenkins Active Directory Plugin CVE-2022-23105 Fix available 6.5 MediumJanuary 12, 2022
• jenkins active directory, jenkins project active directory plugin +1 more CSRF vulnerability in Jenkins Active Directory Plugin CVE-2020-2303 Fix available 4.3 MediumNovember 4, 2020
• jenkins active directory, jenkins project active directory plugin +1 more Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page CVE-2020-2302 Fix available 4.3 MediumNovember 4, 2020
• jenkins active directory, jenkins project active directory plugin +1 more Authentication cache in Active Directory Jenkins Plugin allows logging in with any password CVE-2020-2301 Fix available 9.8 CriticalNovember 4, 2020
• jenkins active directory, jenkins project active directory plugin +1 more Improper Authentication (empty password) in Jenkins Active Directory Plugin CVE-2020-2300 Fix available 9.8 CriticalNovember 4, 2020
• jenkins active directory, jenkins project active directory plugin +1 more Improper Authentication in Jenkins Active Directory Plugin CVE-2020-2299 Fix available 9.8 CriticalNovember 4, 2020
• jenkins active directory, jenkins project active directory plugin +1 more Jenkins Active Directory Plugin Improper certificate validation with StartTLS CVE-2019-1003009 Fix available 7.4 HighFebruary 6, 2019
• jenkins active directory, jenkins project active directory jenkins plugin +1 more Jenkins Active Directory Plugin did not verify certificate of AD server CVE-2017-2649 Fix available 8.1 HighJuly 27, 2018