Identity Provider

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-27978 Oct 28, 15:15 HIGH This Week

Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Java Identity Provider Shibboleth

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2015-1796 Jul 08, 15:59 Maven MEDIUM PATCH This Month

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Java Information Disclosure Identity Provider Opensaml Java Shibboleth

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2020-27978

EPSS 2% CVSS 7.5

HIGH This Week

Denial Of Service Java Identity Provider +1

NVD

CVE-2015-1796 Maven

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

Java Information Disclosure Identity Provider +2

NVD