CVE-2022-23105: Jenkins Active Directory

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.

Affected products

• Jenkins Active Directory: up to and including 2.25

Published 2022-01-12. Last modified 2026-06-17.