Login Request a demo
OJ
Product
Opensaml Java
by Shibboleth · last CVE Apr 4, 2019
2
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 0
Severity
All severities2Critical0High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Opensaml Java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-3603
5.9
1%
Apr 4
The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server…
Affected: before 2.6.2
CVE-2015-1796
–
1%
Jul 8
The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are…
Affected: through 2.6.4
Showing 2