Vulnerabilities of Jenkins project Jenkins Active Directory Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-57288 | Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search… | 3.7 Low | Jun 24, 2026 |
| CVE-2026-48918 | Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default | 6.6 Medium | May 27, 2026 |
| CVE-2026-48919 | Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation | 6.6 Medium | May 27, 2026 |
| CVE-2023-37943 | Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs… | Not rated | Jul 12, 2023 |
| CVE-2022-23105 | Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins… | Not rated | Jan 12, 2022 |
| CVE-2020-2303 | A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers… | Not rated | Nov 4, 2020 |
| CVE-2020-2302 | A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read… | Not rated | Nov 4, 2020 |
| CVE-2020-2301 | Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a… | Not rated | Nov 4, 2020 |
| CVE-2020-2300 | Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows/ADSI mode,… | Not rated | Nov 4, 2020 |
| CVE-2020-2299 | Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user if a magic constant is used as… | Not rated | Nov 4, 2020 |
| CVE-2019-1003009 | An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in… | Not rated | Feb 6, 2019 |
Other Jenkins project products
Jenkins 153
Jenkins Script Security Plugin 39
Jenkins Pipeline: Groovy Plugin 11
Jenkins Email Extension Plugin 9
Jenkins Build Failure Analyzer Plugin 8
Jenkins GitLab Plugin 8
Jenkins Job Configuration History Plugin 8
Jenkins OpenId Connect Authentication Plugin 8
Jenkins NS-ND Integration Performance Publisher Plugin 8
Jenkins Pipeline: Shared Groovy Libraries Plugin 8
Jenkins OpenShift Deployer Plugin 7
Jenkins Amazon EC2 Plugin 7