shibboleth Summary
Latest vulnerabilities published by shibboleth
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Flaw in Shibboleth Service Provider Affects Database Configurations
CVE-2025-9943ShibbolethService ProviderParameter Manipulation Vulnerability in OpenSAML C++ Library
CVE-2025-31335ShibbolethOpensaml C++ Library4MEDIUMSSRF Vulnerability in Shibboleth XMLTooling Before 3.2.4
CVE-2023-36661ShibbolethXmltooling👾🟡EPSS 60%7.5HIGHInsecure Folder Permissions in Shibboleth Service Provider on Windows
CVE-2023-22947ShibbolethService Provider7.3HIGHServer-Side Request Forgery Vulnerability in Shibboleth OIDC OP Plugin
CVE-2022-24129ShibbolethOidc OpEPSS 21%8.2HIGHNULL Pointer Dereference Vulnerability in Shibboleth Service Provider by Shibboleth
CVE-2021-31826ShibbolethService Provider7.5HIGHContent Injection Vulnerability in Shibboleth Service Provider
CVE-2021-28963ShibbolethService Provider5.3MEDIUMDenial of Service Vulnerability in Shibboleth Identity Provider by Shibboleth
CVE-2020-27978ShibbolethIdentity Provider7.5HIGHImproper File Permissions in Shibboleth Service Provider by Shibboleth Consortium
CVE-2019-19191ShibbolethService Provider7.8HIGHWorld Readable DES Private Key in Shibboleth SP by Internet2
CVE-2010-2450ShibbolethService Provider7.5HIGHMan-in-the-Middle Attack Vulnerability in Shibboleth Identity Provider and OpenSAML Java
CVE-2014-3603Shibboleth; Opens...Identity Provider (idp)5.9MEDIUMDigital Signature Vulnerability in Shibboleth XMLTooling Product by Shibboleth
CVE-2018-0489ShibbolethShibboleth Xmltooling-...6.5MEDIUMDigital Signature Vulnerability in Shibboleth XMLTooling-C and Service Provider
CVE-2018-0486ShibbolethXmltooling-c Before 1.6.36.5MEDIUMSecurity Misconfiguration in Shibboleth Service Provider by Shibboleth
CVE-2017-16852ShibbolethService Provider8.1HIGHOpenSAML Metadata Configuration Flaw Exposes Security Risks
CVE-2017-16853ShibbolethOpensaml8.1HIGHTrust Engine Vulnerability in Shibboleth Identity Provider and OpenSAML Java
CVE-2015-1796ShibbolethIdentity ProviderDenial of Service Vulnerability in Shibboleth Service Provider
CVE-2015-2684ShibbolethService ProviderXML External Entity Vulnerability in Shibboleth OpenSAML-Java
CVE-2013-6440ShibbolethOpensamlXML Signature Vulnerability in Shibboleth OpenSAML Library and IdP
CVE-2011-1411ShibbolethOpensaml
10 September 2025
28 March 2025
25 June 2023
11 January 2023
4 February 2022
27 April 2021
22 March 2021
28 October 2020
21 November 2019
7 November 2019
4 April 2019
27 February 2018
13 January 2018
16 November 2017
8 July 2015
31 March 2015
14 February 2014
2 September 2011
No more vulnerabilities to load.