← Back
CWE-90

81 CVEs • Abstraction: Base

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.

JSON object

Loading...

CVEs (81)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-9299
2Fedoraproject
Jenkins
2Fedora
Jenkins
May 13, 2026
Jan 12, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.