Veille CVE

Recherche « Jenkins Project Jenkins LDAP Plugin »

6 CVE

Critique 0 Élevée 0 Moyenne 5 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins LDAP Plugin » ✕
  1. CVE-2026-84662 4.3 Moyenne

    Jenkins Project Jenkins LDAP Plugin

    Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.

  2. CVE-2026-57288 3.7 Faible

    Jenkins Project Jenkins Active Directory Plugin · Jenkins active directory

    Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a matching user whose password they know without knowing their exact user name.

  3. CVE-2026-48919 6.6 Moyenne

    Jenkins Project Jenkins Active Directory Plugin · Jenkins active directory

    Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.

  4. CVE-2026-48918 6.6 Moyenne

    Jenkins Project Jenkins Active Directory Plugin · Jenkins active directory

    Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.

  5. CVE-2026-48917 6.6 Moyenne

    Jenkins Project Jenkins LDAP Plugin · Jenkins ldap

    Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.

  6. CVE-2026-48916 6.6 Moyenne

    Jenkins Project Jenkins LDAP Plugin · Jenkins ldap

    Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.