Skip to contentJenkins Azure Ad vulnerabilities
- jenkins azure ad, jenkins project microsoft entra id (previously azure ad) plugin +1 moreJenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerabilityCVE-2026-42525Fix available4.3 Medium
- jenkins azure ad, jenkins project azure ad plugin +1 moreNon-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) PluginCVE-2023-41935Fix available7.5 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreInsufficient Session Expiration in Jenkins Azure AD PluginCVE-2023-244268.8 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin allows bypassing CSRF protection for any URLCVE-2021-21679Fix available8.8 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreClient secret transmitted in plain text by Azure AD PluginCVE-2020-2119Fix available5.3 Medium
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin stored the client secret unencryptedCVE-2019-10318Fix available8.8 High