Login Request a demo
OP
Product
Opensaml
by Shibboleth · last CVE Nov 16, 2017
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 0
Severity
All severities3Critical0High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Opensaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-16853
8.1
1%
Nov 16
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the…
Affected: before 2.6.1
CVE-2013-6440
–
3%
Feb 14
The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to…
Affected: through 2.6.0; 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.5.0; +3 more
CVE-2011-1411
–
2%
Sep 2
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML…
Affected: 2.4.0; 2.4.1; 2.4.2; 2.5.0
Showing 3