Jenkins Project Jenkins Microsoft Entra Id (Previously Azure Ad) Plugin
2 CVEs affecting Jenkins Project Jenkins Microsoft Entra Id (Previously Azure Ad) Plugin. Latest disclosed: 2026-09-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-84672 | High | 8.8 | 2026-09-02 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID a… |
CVE-2026-42525 | Medium | 4.3 | 2026-04-29 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to per… |