Jenkins Project Jenkins Microsoft Entra ID (Previously Azure AD) Plugin vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Microsoft Entra ID (Previously Azure AD) Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-84672jenkins projectjenkins microsoft entra id (previously azure ad) plugin
EPSS score
0.42%
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.4.3CVE-2026-42525jenkins projectjenkins microsoft entra id (previously azure ad) plugin+2
EPSS score
0.33%
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.