simplesamlphp

Records38All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

simplesamlphp records in CISA KEV

No simplesamlphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simplesamlphp 24 records MEDIUM Saml2 4 records MEDIUM Xml-security 2 records HIGH Infocard Module 1 record LOW Information Cards Module 1 record LOW Simplesamlphp-module-casserver 1 record MEDIUM Simplesamlphp-module-openid 1 record LOW Simplesamlphp-module-openidprovider 1 record LOW

Records

1 record in Infocard Module · all components

TI-2017-09536 CVE-2017-12874 · GHSA-fj28-869x-vv5g

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by…

LOW 35

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01273 Published 2017-09-01 Fixed in 1.0.1 CWE-20

Open these records in search →

Critical	4
High	17
Medium	16
Low	1
No CVSS	0