Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.jenkins-ci.plugins:active-directory
Maven
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Jenkins Active Directory Plugin has an LDAP injection vulnerability
CVE-2026-57288 · GHSA-GX55-P8G7-P3FH
org.jenkins-ci.plugins:active-directory
Maven
Low
Fix reported
2026-09-25
Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation
CVE-2026-48919 · GHSA-P2GW-F3RV-82MW
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2026-07-01
Jenkins Active Directory Plugin follows LDAP referrals by default
CVE-2026-48918 · GHSA-WRHR-54P6-Q97F
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2026-07-01
Jenkins Active Directory Plugin did not verify certificate of AD server
CVE-2017-2649 · GHSA-VCGJ-J8C5-2H52
org.jenkins-ci.plugins:active-directory
Maven
High
Fix reported
2024-02-18
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
CVE-2020-2301 · GHSA-954F-XW44-56R2
org.jenkins-ci.plugins:active-directory
Maven
Critical
Fix reported
2024-02-16
Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
CVE-2020-2302 · GHSA-Q6RQ-4WHR-R879
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2024-02-16
CSRF vulnerability in Jenkins Active Directory Plugin
CVE-2020-2303 · GHSA-2WF5-4MF7-VMH3
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2024-02-16
Improper Authentication in Jenkins Active Directory Plugin
CVE-2020-2299 · GHSA-RF92-3VJR-W628
org.jenkins-ci.plugins:active-directory
Maven
Critical
Fix reported
2024-02-16
Improper Authentication (empty password) in Jenkins Active Directory Plugin
CVE-2020-2300 · GHSA-8WCW-CW2F-H4G2
org.jenkins-ci.plugins:active-directory
Maven
Critical
Fix reported
2024-02-16
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
CVE-2023-37943 · GHSA-G8C3-6FJ2-87W7
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2024-02-16
User passwords transmitted in plain text by Jenkins Active Directory Plugin
CVE-2022-23105 · GHSA-C8CC-HJ57-VM65
org.jenkins-ci.plugins:active-directory
Maven
Medium
Fix reported
2024-02-16
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
CVE-2019-1003009 · GHSA-2H95-4XW9-M68J
org.jenkins-ci.plugins:active-directory
Maven
High
Fix reported
2024-02-16