Product by Jenkins Project
Jenkins LDAP Plugin
15 known vulnerabilities in Jenkins LDAP Plugin (Jenkins Project), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-48920 | Jenkins Email Extension Plugin: security vulnerability | 8.8 | |
| High | CVE-2026-48922 | Jenkins Credentials Binding Plugin: Remote Code Execution | 7.5 | |
| High | CVE-2026-48921 | Jenkins Pipeline: security vulnerability | 7.5 | |
| Medium | CVE-2026-48916 | Jenkins LDAP Plugin: Server-Side Request Forgery (SSRF) | 6.6 | |
| Medium | CVE-2026-48917 | Jenkins LDAP Plugin: Deserialization of Untrusted Data | 6.6 | |
| Medium | CVE-2026-48919 | Jenkins Active Directory Plugin: Deserialization of Untrusted Data | 6.6 | |
| Medium | CVE-2026-48918 | Jenkins Active Directory Plugin: security vulnerability | 6.6 | |
| Medium | CVE-2026-84662 | Jenkins LDAP Plugin: security vulnerability | 4.3 | |
| Medium | CVE-2026-48927 | Jenkins buildgraph-view Plugin: Cross-Site Scripting (XSS) | 5.5 | |
| Medium | CVE-2026-48924 | Jenkins Bitbucket OAuth Plugin: security vulnerability | 4.3 | |
| Medium | CVE-2026-48926 | Jenkins Job Import Plugin: Improper Privilege Management | 4.3 | |
| Medium | CVE-2026-48923 | Jenkins AppSpider Plugin: security vulnerability | 4.3 | |
| Medium | CVE-2026-9674 | Jenkins Multijob Plugin: Cross-Site Request Forgery (CSRF) | 4.3 | |
| Medium | CVE-2026-48925 | Jenkins GitHub Integration Plugin: Cross-Site Request Forgery (CSRF) | 4.3 | |
| Medium | CVE-2023-32978 | Jenkins LDAP Plugin: Cross-Site Request Forgery (CSRF) | 4.3 |