MS16-020: Security update for Active Directory Federation Services to address denial of service: February 9, 2016

None None...

MS16-020: Security Update for Active Directory Federation Services to Address Denial of Service (3134222)

The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in Active Directory Federation Services ADFS due to a failure to properly process certain input during forms-based authentication. A remote attacker can exploit this, via crafted...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Federation Admin Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation Admin component, which could be exploited by remote attackers to modify data...

Unspecified vulnerability in Oracle Fusion Middleware Oracle Identity Federation protocol support component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation protocol support component, which could be exploited by remote attackers to modify data...

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

CVE-2016-0404

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

CVE-2016-0413

CVE-2016-0413 affects Oracle Fusion Middleware, specifically the Oracle Identity Federation component in version 11.1.1.7. The connected documents describe an unspecified vulnerability that allows remote authenticated users to affect data integrity via vectors related to Federation protocol suppo...

CVE-2016-0404

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.2.2 allows remote attackers to affect integrity via vectors related to Admin...

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...

KLA10752 Denial of service vulnerability in Microsoft Acrtive Directory Federation Services

Lack of input data checks was found in Microsoft Active Directory Federation Services. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed input to form-based authentication. Original advisories...

[SECURITY] Fedora 21 Update: ipsilon-1.1.1-2.fc21

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 22 Update: ipsilon-1.1.1-2.fc22

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 23 Update: ipsilon-1.1.1-2.fc23

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 23 Update: ipsilon-1.0.0-5.fc23

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

CVE-2015-3158

CVE-2015-3158 affects PicketLink in Red Hat JBoss EAP 6.x where the invokeNextValve in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java fails to enforce role-based authorization. This allows remote authenticated users to access restricted resources via a direct request or an SP-initi...

Microsoft Active Directory Federation Services crossite scripting

Crossite scipring in web interface...

Cross site scripting

Cross-site scripting XSS vulnerability in adfs/ls in Active Directory Federation Services AD FS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter, aka "ADFS XSS Elevation of Privilege Vulnerability....