Europa

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Europa records in CISA KEV

No Europa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eidas-node Integration Package 2 records MEDIUM Technical Specifications For Digital Covid Certificates 1 record MEDIUM Web-t 1 record LOW

Records

2 records in Eidas-node Integration Package · all components

TI-2019-13476 CVE-2019-18633 · GHSA-232r-9jvp-5ffj

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate…

MEDIUM 43

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2019-10-30 No fix listed CWE-295

TI-2019-13475 CVE-2019-18632 · GHSA-g7vg-v5mg-xqvv

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking…

MEDIUM 43

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2019-10-30 No fix listed CWE-295

Open these records in search →

Critical	3
High	0
Medium	1
Low	0
No CVSS	0