Login Request a demo
AA
Product
Azure AD
by Jenkins · last CVE Apr 29, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Azure AD to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24426
8.8
1%
Jan 26
Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login
Affected: through 303.va_91ef20ee49f
CVE-2021-21679
8.8
1%
Aug 31
Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins
Affected: 164.v5b48baa961d2 through 179.vf6841393099e
CVE-2019-10318
8.8
2%
Apr 30
Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users…
Affected: through 0.3.3
CVE-2023-41935
7.5
1%
Sep 6
Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and…
Affected: through 348.vefd011eea_20b; 378.vd6e2874a_69eb through 396.v86ce29279947
CVE-2020-2119
5.3
1%
Feb 12
Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure
Affected: through 1.1.2
CVE-2026-42525
4.3
0%
Apr 29
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing…
Affected: through 666.v6060de32f87d
Showing 6