Shibboleth

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Shibboleth records in CISA KEV

No Shibboleth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Service Provider 7 records HIGH Identity Provider 3 records LOW Opensaml 3 records LOW Opensaml Java 2 records LOW Xmltooling-c 2 records LOW Oidc Op 1 record MEDIUM Shibboleth-identity-provider 1 record LOW Shibboleth-sp 1 record LOW

Records

1 record in Shibboleth-sp · all components

TI-2011-02208 CVE-2011-2516 · GHSA-2jmv-v2x6-mmv8

Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as…

LOW 33

Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other products, allows remote attackers to cause a denial of service (crash) via a signa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0772 Published 2011-07-11 No fix listed CWE-189

Open these records in search →

Critical	1
High	9
Medium	10
Low	0
No CVSS	0