Skip to main content

Xmltooling C

2 CVEs product

Monthly

CVE-2018-0489 Feb 27, 15:29 MEDIUM PATCH This Month

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Debian Jwt Attack Debian Linux +4
NVD
CVSS 3.0
6.5
EPSS
2.1%
CVE-2018-0486 Jan 13, 18:29 MEDIUM This Month

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Debian Jwt Attack Debian Linux +2
NVD
CVSS 3.0
6.5
EPSS
1.5%
EPSS 2% CVSS 6.5
MEDIUM PATCH This Month

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Debian +6
NVD
EPSS 2% CVSS 6.5
MEDIUM This Month

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Debian +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy