OpenID

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

OpenID records in CISA KEV

No OpenID vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openid 4 records LOW Openid4java 1 record LOW Openid Connect 1 record LOW Ruby-openid 1 record MEDIUM

Records

4 records in Openid · all components

TI-2007-01592 CVE-2007-1652 · GHSA-3x88-xvgr-m6fg

OpenID allows remote attackers to forcibly log a user into an OpenID enabled site…

LOW 36

OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01314 Published 2007-03-24 No fix listed

TI-2007-04984 CVE-2007-5173 · GHSA-w67c-79jh-g7ff

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in…

LOW 35

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02798 Published 2007-10-03 No fix listed CWE-94

TI-2008-03142 CVE-2008-3280 · GHSA-cq23-cxpr-f49x

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used…

LOW 33

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03951 Published 2021-05-21 No fix listed CWE-338

TI-2007-01591 CVE-2007-1651 · GHSA-f7mc-cw4j-gjxv

Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to…

LOW 33

Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related to an arbitrary remote web site and cache…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0147 Published 2007-03-24 No fix listed

Open these records in search →

Critical	1
High	1
Medium	6
Low	0
No CVSS	0