Internet2

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Internet2 records in CISA KEV

No Internet2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opensaml 3 records MEDIUM Shibboleth-sp 3 records MEDIUM Grouper 2 records MEDIUM Xmltooling 2 records MEDIUM Identity Provider 1 record LOW Service Provider 1 record LOW

Records

1 record in Service Provider · all components

TI-2009-03142 CVE-2009-3300 · GHSA-xjxx-h5w2-fphm

Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x…

LOW 17

Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2 Middleware Initiati…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01673 Published 2009-11-06 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	3
Low	1
No CVSS	0