CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

IBM Security Bulletins•added 2020/01/31 5:50 p.m.•25 views

Security Bulletin: Rational Asset Analyzer (RAA) is affected by a WAS vulnerability.

Summary Rational Asset Analyzer RAA has addressed the following vulnerability in WAS. Vulnerability Details CVEID: CVE-2014-3603 DESCRIPTION: The 1 HttpResource and 2 FileBackedHttpResource implementations in Shibboleth Identity Provider IdP before 2.4.1 and OpenSAML Java 2.6.2 do not verify that...

5.9CVSS1.4AI score0.00844EPSS

SaveExploits1Affected Software1

Prion•added 2019/04/04 2:29 p.m.•27 views

Code injection

The 1 HttpResource and 2 FileBackedHttpResource implementations in Shibboleth Identity Provider IdP before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

4.3CVSS6.8AI score0.00844EPSS

SaveExploits1References3Affected Software2

Rapid7 Vulnerability Database (full)•added 2019/04/04 12:00 a.m.•5 views

CVE-2014-3603: Improper Validation of Certificate with Host Mismatch

5.9CVSS6.6AI score0.00844EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by