Jenkins Project Jenkins Ldap Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_ldap_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2026-48916P4MEDIUMCVSS 6.6≤ 807.v7d7de30930cf2026-05-27
CVE-2026-48916 [MEDIUM] CWE-918 CVE-2026-48916: Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
nvd
CVE-2026-48917P3MEDIUMCVSS 6.6≤ 807.v7d7de30930cf2026-05-27
CVE-2026-48917 [MEDIUM] CWE-502 CVE-2026-48917: Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without vali
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
nvd
CVE-2026-84662P4MEDIUMCVSS 4.3≤ 807.809.vd3a_4e5e4ec982026-09-02
CVE-2026-84662 [MEDIUM] CWE-601 CVE-2026-84662: Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.
nvd