Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Niif Subscribe
Filtered by product Shibboleth Authentication
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-3375 1 Niif 1 Shibboleth Authentication 2016-12-05 5.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete user role matching rules via unspecified vectors.
CVE-2015-5513 1 Niif 1 Shibboleth Authentication 2015-08-20 2.1 LOW N/A
Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer blocks" permission to inject arbitrary web script or HTML via unspecified vectors related to a login link.