Read the docs

Niif

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Niif records in CISA KEV

No Niif vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shibboleth Authentication 2 records LOW Shib Auth 1 record LOW Shibb Auth 1 record LOW

Records

2 records in Shibboleth Authentication · all components

TI-2015-02986 CVE-2015-3375 · GHSA-cxx7-f5xv-cvff

Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module…

Priority LOW 27

Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requ…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00643 Published 2015-04-21 No fix listed CWE-352
TI-2015-04643 CVE-2015-5513 · GHSA-5rgh-fvf3-hjmm

Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer blocks" permission to i…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01473 Published 2015-08-18 No fix listed CWE-79
Open these records in search →