All products

org.jenkins-ci.plugins:active-directory

Maven · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jenkins Active Directory Plugin has an LDAP injection vulnerabilityCVE-2026-57288 · GHSA-GX55-P8G7-P3FH org.jenkins-ci.plugins:active-directory Maven Low Fix reported
Jenkins Active Directory Plugin deserializes data from LDAP referrals without validationCVE-2026-48919 · GHSA-P2GW-F3RV-82MW org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
Jenkins Active Directory Plugin follows LDAP referrals by defaultCVE-2026-48918 · GHSA-WRHR-54P6-Q97F org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
Jenkins Active Directory Plugin did not verify certificate of AD serverCVE-2017-2649 · GHSA-VCGJ-J8C5-2H52 org.jenkins-ci.plugins:active-directory Maven High Fix reported
Authentication cache in Active Directory Jenkins Plugin allows logging in with any passwordCVE-2020-2301 · GHSA-954F-XW44-56R2 org.jenkins-ci.plugins:active-directory Maven Critical Fix reported
Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check pageCVE-2020-2302 · GHSA-Q6RQ-4WHR-R879 org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
CSRF vulnerability in Jenkins Active Directory PluginCVE-2020-2303 · GHSA-2WF5-4MF7-VMH3 org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
Improper Authentication in Jenkins Active Directory PluginCVE-2020-2299 · GHSA-RF92-3VJR-W628 org.jenkins-ci.plugins:active-directory Maven Critical Fix reported
Improper Authentication (empty password) in Jenkins Active Directory PluginCVE-2020-2300 · GHSA-8WCW-CW2F-H4G2 org.jenkins-ci.plugins:active-directory Maven Critical Fix reported
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosureCVE-2023-37943 · GHSA-G8C3-6FJ2-87W7 org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
User passwords transmitted in plain text by Jenkins Active Directory PluginCVE-2022-23105 · GHSA-C8CC-HJ57-VM65 org.jenkins-ci.plugins:active-directory Maven Medium Fix reported
Jenkins Active Directory Plugin Improper certificate validation with StartTLSCVE-2019-1003009 · GHSA-2H95-4XW9-M68J org.jenkins-ci.plugins:active-directory Maven High Fix reported