Read the docs

Internet2

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Internet2 records in CISA KEV

No Internet2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opensaml 3 records MEDIUM Shibboleth-sp 3 records MEDIUM Grouper 2 records MEDIUM Xmltooling 2 records MEDIUM Identity Provider 1 record LOW Service Provider 1 record LOW

Records

3 records in Opensaml · all components

TI-2009-03314 CVE-2009-3476 · GHSA-hvmf-6hr8-vcpv

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider…

Priority MEDIUM 47

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04131 Published 2009-09-29 No fix listed CWE-119
TI-2009-03312 CVE-2009-3474 · GHSA-575w-rwc7-4259

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2…

Priority LOW 36

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2009-09-29 No fix listed CWE-310
TI-2013-05393 CVE-2013-6440 · GHSA-v723-58jv-2qc4

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML…

Priority LOW 28

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to con…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02752 Published 2014-02-14 Partial fix · 2.6.1 CWE-200
Open these records in search →