Jenkins Ldap Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-02. Vendor: Jenkins Project.

CVEs of Jenkins Ldap Plugin

• CVE-2026-84662 - CVSS 4.3 (medium), 2026-09-02: Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an…
• CVE-2026-48916 - CVSS 6.6 (medium), 2026-05-27: Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
• CVE-2026-48917 - CVSS 6.6 (medium), 2026-05-27: Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
• CVE-2023-32978 - CVSS 4.3 (medium), 2023-05-16: A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using…