Read the docs

OpenID

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

OpenID records in CISA KEV

No OpenID vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openid 4 records LOW Openid4java 1 record LOW Openid Connect 1 record LOW Ruby-openid 1 record MEDIUM

Records

1 record in Openid4java · all components

TI-2011-03781 CVE-2011-4314 · GHSA-j473-c3rr-rx9p

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise…

Priority LOW 32

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribut…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03074 Published 2012-01-27 Partial fix · 0.9.6 CWE-20
Open these records in search →