shibboleth Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by shibboleth

JSON RSS CSV 🔔 Create Alert Trigger

10 September 2025

SQL Injection Flaw in Shibboleth Service Provider Affects Database Configurations
CVE-2025-9943
ShibbolethService Provider9.1CRITICAL

25 June 2023

SSRF Vulnerability in Shibboleth XMLTooling Before 3.2.4
CVE-2023-36661
ShibbolethXmltooling👾🟡EPSS 60%7.5HIGH

11 January 2023

Insecure Folder Permissions in Shibboleth Service Provider on Windows
CVE-2023-22947
ShibbolethService Provider7.3HIGH

4 February 2022

Server-Side Request Forgery Vulnerability in Shibboleth OIDC OP Plugin
CVE-2022-24129
ShibbolethOidc OpEPSS 14%8.2HIGH

27 April 2021

NULL Pointer Dereference Vulnerability in Shibboleth Service Provider by Shibboleth
CVE-2021-31826
ShibbolethService Provider7.5HIGH

28 October 2020

Denial of Service Vulnerability in Shibboleth Identity Provider by Shibboleth
CVE-2020-27978
ShibbolethIdentity Provider7.5HIGH

21 November 2019

Improper File Permissions in Shibboleth Service Provider by Shibboleth Consortium
CVE-2019-19191
ShibbolethService Provider7.8HIGH

7 November 2019

World Readable DES Private Key in Shibboleth SP by Internet2
CVE-2010-2450
ShibbolethService Provider7.5HIGH

16 November 2017