Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Internet2 Component: Shibboleth-sp Clear all filters
TI-2009-03314 CVE-2009-3476 · GHSA-hvmf-6hr8-vcpv

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider…

Priority MEDIUM 47

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04131 Published 2009-09-29 No fix listed CWE-119
TI-2009-03312 CVE-2009-3474 · GHSA-575w-rwc7-4259

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2…

Priority LOW 36

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2009-09-29 No fix listed CWE-310