All packages
Jenkins Active Directory Plugin vulnerabilities
3 known CVE vulnerabilities in Jenkins Active Directory Plugin, translated and rated.
- CVE-2026-48919Medium
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation. This may lead to processing of untrusted data by the deserialization mechanism.
- CVE-2026-48918Medium
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.
- CVE-2023-37943Medium
Jenkins Active Directory Plugin version 2.30 and earlier ignores the 'Require TLS' and 'StartTls' options, resulting in an unencrypted connection test to Active Directory servers.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS