Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Internet2 Component: Opensaml Clear all filters
TI-2013-05393 CVE-2013-6440 · GHSA-v723-58jv-2qc4

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML…

Priority LOW 28

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to con…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02752 Published 2014-02-14 Partial fix · 2.6.1 CWE-200
TI-2009-03314 CVE-2009-3476 · GHSA-hvmf-6hr8-vcpv

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider…

Priority MEDIUM 47

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04131 Published 2009-09-29 No fix listed CWE-119
TI-2009-03312 CVE-2009-3474 · GHSA-575w-rwc7-4259

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2…

Priority LOW 36

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2009-09-29 No fix listed CWE-310