| Bug | Description |
|---|
| CVE-2021-28963 | Shibboleth Service Provider before 3.2.1 allows content injection beca ... |
| CVE-2017-16852 | shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataPro ... |
| CVE-2015-2684 | Shibboleth Service Provider (SP) before 2.5.4 allows remote authentica ... |
| CVE-2010-2450 | The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/s ... |
| CVE-2009-3476 | Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibbole ... |
| CVE-2009-3475 | Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and ... |
| CVE-2009-3474 | OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by ... |
| CVE-2009-3300 | Multiple cross-site scripting (XSS) vulnerabilities in the Identity Pr ... |