Simplesamlphp Schwachstellen

Version

1.14.0	10
1.14.1	10
1.14.2	10
1.14.3	10
1.14.4	10

Massnahmen

Official Fix	26
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	26

Zugriffsart

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	26

Authentisierung

Not Defined	0
High	0
Low	2
None	24

Benutzeraktivität

Not Defined	0
Required	12
None	14

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	0
≤5	4
≤6	8
≤7	4
≤8	6
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	2
≤5	2
≤6	8
≤7	4
≤8	6
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	2
≤4	2
≤5	6
≤6	8
≤7	4
≤8	4
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	2
≤4	0
≤5	0
≤6	4
≤7	4
≤8	4
≤9	2
≤10	6

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	6
<2k	18
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	26
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (63): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.5.1, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.7, 1.8, 1.8.1, 1.9, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.11, 1.12, 1.13, 1.14, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.14.11, 1.14.12, 1.14.13, 1.14.14, 1.14.15, 1.14.16, 1.15, 1.15.1, 1.15.2, 1.15.3, 1.18, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.18.5, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 3.0, 3.1

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
17.01.2023	4.1	4.1	simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2010-10008
01.01.2023	4.1	4.0	SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2010-10002
10.09.2021	5.2	5.1	simpleSAMLphp Authentication Plugin simplesamlphp-authentication.php Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38320
21.04.2020	3.0	2.7	SimpleSAMLphp Source Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5301
24.01.2020	4.3	4.1	SimpleSAMLphp Twig Template erroreport.php Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2020-5226
24.01.2020	4.8	4.6	SimpleSAMLphp Log erroreport.php Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5225
06.11.2019	7.4	7.2	SimpleSAMLphp XML Encryption erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.09	CVE-2011-4625
05.03.2018	6.8	6.5	SimpleSAMLphp Signature Validation HTTPRedirect.php schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-7711
05.03.2018	7.4	7.2	SimpleSAMLphp saml2 Library erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2018-7644
02.02.2018	8.5	8.4	SimpleSAMLphp sqlauth Module erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2018-6521