SAML-Toolkits

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

SAML-Toolkits records in CISA KEV

No SAML-Toolkits vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Onelogin Saml Sso · all components

TI-2016-08966 CVE-2016-10928 · GHSA-c3x3-475c-mxhv

LOW 36

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01679 Published 2019-08-22 No fix listed CWE-798