ON
Vendor
Onelogin
11
CVEs
0
On KEV
0
New 30D
Products
RU9.8
Ruby-saml
Onelogin
9 CVEs0 on KEV0 new
OS7.5
Onelogin Saml Sso
Onelogin
1 CVEs0 on KEV0 new
PY9.8
Pythonsaml
Onelogin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-66568 | RU Ruby-saml Onelogin | 9.1 | Dec 9 | The ruby-saml library implements the client side of an SAML authorization |
| CVE-2025-66567 | RU Ruby-saml Onelogin | 9.1 | Dec 9 | The ruby-saml library is for implementing the client side of a SAML authorization |
| CVE-2025-25293 | RU Ruby-saml Onelogin | 7.5 | Mar 12 | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby |
| CVE-2025-25292 | RU Ruby-saml Onelogin | 9.8 | Mar 12 | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby |
| CVE-2025-25291 | RU Ruby-saml Onelogin | 9.8 | Mar 12 | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby |
| CVE-2024-45409 | RU Ruby-saml Onelogin | 9.8 | Sep 10 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector |
| CVE-2015-20108 | RU Ruby-saml Onelogin | 9.8 | May 27 | xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used |
| CVE-2016-10928 | OS Onelogin Saml Sso Onelogin | 7.5 | Aug 22 | The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users |
| CVE-2017-11428 | RU Ruby-saml Onelogin | 9.8 | Apr 17 | OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate… |
| CVE-2017-11427 | PY Pythonsaml Onelogin | 9.8 | Apr 17 | OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate… |
| CVE-2016-5697 | RU Ruby-saml Onelogin | 7.5 | Jan 23 | Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors |