Login Request a demo
AD
Product
Active Directory
by Jenkins · last CVE Jun 24, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 2Medium 6Low 1
Severity
All severities12Critical3High2Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Active Directory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48919
6.6
0%
May 27
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation
Affected: through 2.41
CVE-2026-48918
6.6
0%
May 27
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default
Affected: through 2.41
CVE-2022-23105
6.5
0%
Jan 12
Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations
Affected: through 2.25
CVE-2023-37943
5.9
0%
Jul 12
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory unencrypted, allowing…
Affected: through 2.30
CVE-2020-2303
4.3
1%
Nov 4
A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to…
Affected: through 2.19
CVE-2020-2302
4.3
1%
Nov 4
A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page
Affected: through 2.19
Showing 6