Lucene search
K

195 matches found

F5 Networks
F5 Networks
added 2025/04/28 5:49 p.m.15 views

K000151066: OpenSAML vulnerability CVE-2025-31335

Security Advisory Description The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures. CVE-2025-31335 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

4CVSS4.7AI score0.00212EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/04/02 12:0 a.m.10 views

Shibboleth < 3.5.0.1 Forged Messages

The version of Shibboleth Service Provider installed on the remote is prior to 3.5.0.1. It is, therefore, affected by a vulnerability. The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS5.2AI score0.00212EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/03/29 3:2 a.m.3 views

SUSE CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS7AI score0.00212EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/03/28 12:36 p.m.14 views

CVE-2025-31335

A flaw was found in the OpenSAML C++ library. This vulnerability allows forging signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

4CVSS7AI score0.00212EPSS
Exploits0References7
OSV
OSV
added 2025/03/28 6:15 a.m.12 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

7.2AI score
Exploits0References4
NVD
NVD
added 2025/03/28 6:15 a.m.32 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00212EPSS
Exploits0References4
OSV
OSV
added 2025/03/28 6:15 a.m.2 views

DEBIAN-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS4.8AI score0.00212EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.3 views

OpenSAML 安全漏洞

OpenSAML is a set of open source C++ and Java libraries from OpenSAML Open Source designed to support developers using the Security Assertion Markup Language SAML. A security vulnerability exists in OpenSAML versions prior to 3.3.1 that stems from a parameter manipulation that could lead to a...

4CVSS4.4AI score0.00212EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/03/28 12:0 a.m.5 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS7.2AI score0.00212EPSS
Exploits0References4
CVE
CVE
added 2025/03/28 12:0 a.m.71 views

CVE-2025-31335

CVE-2025-31335 affects the OpenSAML C++ library prior to 3.3.1, where parameter manipulation can forge signed SAML messages for bindings that rely on non-XML signatures. The issue is confirmed in multiple feeds referencing OpenSAML

4CVSS4.5AI score0.00212EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2025/03/28 12:0 a.m.6 views

Debian: Security Advisory (DLA-4093-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS4.3AI score0.00212EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/03/28 12:0 a.m.13 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS4.8AI score0.00212EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/28 12:0 a.m.25 views

Debian dla-4093 : libsaml-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4093 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4093-1 [email protected] https://www.debian.org/lts/security/...

5.5AI score
Exploits0References2
Cvelist
Cvelist
added 2025/03/28 12:0 a.m.30 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00212EPSS
Exploits0References4
Debian
Debian
added 2025/03/27 1:16 p.m.5 views

[SECURITY] [DLA 4093-1] opensaml security update

Debian LTS Advisory DLA-4093-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson March 27, 2025 https://wiki.debian.org/LTS Package : opensaml Version : 3.2.0-2+deb11u1 CVE ID : TEMP-1100464-F28DDC Debian Bug : 1100464 Alexander Tan discovered that the OpenSAML C...

5.7AI score
Exploits0
OSV
OSV
added 2025/03/27 12:0 a.m.2 views

DLA-4093-1 opensaml - security update

Bulletin has no description...

4CVSS7.2AI score0.00212EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/24 12:0 a.m.9 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenSAML vulnerability (USN-7364-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7364-1 advisory. Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages...

5.7AI score
Exploits0References1
OpenVAS
OpenVAS
added 2025/03/24 12:0 a.m.17 views

Ubuntu: Security Advisory (USN-7364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References3
Ubuntu
Ubuntu
added 2025/03/21 4:25 p.m.3 views

USN-7364-1: OpenSAML vulnerability

Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to gain unauthorized access to a system and manipulate sensitive information...

5.5AI score
Exploits0References1
OSV
OSV
added 2025/03/21 4:25 p.m.3 views

USN-7364-1 opensaml vulnerability

Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to gain unauthorized access to a system and manipulate sensitive information...

4CVSS5.8AI score0.00212EPSS
Exploits0References2
Rows per page
Query Builder