Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Shibboleth Component: Opensaml Clear all filters
TI-2017-12400 CVE-2017-16853 · GHSA-hrv7-jmr6-cr43

The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp…

Priority LOW 38

The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform cri…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01398 Published 2017-11-16 No fix listed CWE-347
TI-2013-05393 CVE-2013-6440 · GHSA-v723-58jv-2qc4

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML…

Priority LOW 28

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to con…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02752 Published 2014-02-14 Partial fix · 2.6.1 CWE-200