IP
Product
Identity Provider
by Shibboleth · last CVE Oct 28, 2020
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Identity Provider to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-3603
5.9
1%
Apr 4
The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server…
Affected: before 2.4.1
Showing 1