Saml (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2025-10-29. Vendor: Jenkins.

CVEs of Saml

• CVE-2025-64131 - CVSS 7.5 (high), 2025-10-29: Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML…
• CVE-2021-21678 - CVSS 8.8 (high), 2021-08-31: Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
• CVE-2018-1000602 - CVSS 5.9 (medium), 2018-06-26: A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate…