Login Request a demo
IP
Product
Identity Provider
by Shibboleth · last CVE Oct 28, 2020
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities3Critical0High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Identity Provider to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-27978
7.5
2%
Oct 28
Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw
Affected: 3.0.0 before 3.4.6
CVE-2014-3603
5.9
1%
Apr 4
The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server…
Affected: before 2.4.1
CVE-2015-1796
–
1%
Jul 8
The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are…
Affected: through 2.4.3
Showing 3