Jenkins Project Jenkins Microsoft Entra Id Plugin vulnerabilities
2 known vulnerabilities affecting jenkins_project/jenkins_microsoft_entra_id_plugin.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-84672P3HIGHCVSS 8.8≤ 710.v0b_ff8e9cc2d22026-09-02
CVE-2026-84672 [HIGH] CWE-639 CVE-2026-84672: Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.
nvd
CVE-2026-42525P4MEDIUMCVSS 4.3≤ 666.v6060de32f87d2026-04-29
CVE-2026-42525 [MEDIUM] CWE-601 CVE-2026-42525: Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restr
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
nvd