263 matches found
EUVD-2022-35421
Malicious code in bioql PyPI...
CVE-2020-1055
A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'...
CVE-2019-1273
A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'...
CVE-2019-1126
A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...
CVE-2025-21193
Active Directory Federation Server Spoofing Vulnerability...
Microsoft Active Directory Federation Services 跨站请求伪造漏洞
Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...
New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems
Cybersecurity researchers have disclosed a new attack technique called Silver SAML that can be successful even in cases where mitigations have been applied against Golden SAML attacks. Silver SAML "enables the exploitation of SAML to launch attacks from an identity provider like Entra ID against...
ADFS Relying Party Trusts Disclosure
Microsoft Active Directory Federation Services ADFS is a very popular Single Sign On SSO feature offering identity federation to organizations. An ADFS server can be configured to show a login page to connect to corporate applications directly from this Identity Provider IdP. When enabled, this w...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a hacker to bypass existing security restrictions.
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
May 9, 2023—KB5026370 (OS Build 20348.1726)
None None...
Solving one of NOBELIUM’s most novel attacks: Cyberattack Series
Our story begins with eight Microsoft Detection and Response Team DART analysts gathered around a customer’s conference room to solve a cybersecurity mystery. Joined by members of the customer’s cybersecurity team, they were there to figure out how a Russia-based nation-state hacking group known ...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to bypass security restrictions and increase their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability...
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability...
Privilege escalation
Active Directory Federation Services Elevation of Privilege Vulnerability...
CVE-2022-30215
CVE-2022-30215 is identified in the provided documents as an Active Directory Federation Services Elevation of Privilege vulnerability. The NVD entry lists both CVSS v2 and CVSS v3.1 metrics (base scores 8.5 and 7.5 respectively) indicating NETWORK attack vector; CVSSv2 shows MEDIUM exploit compl...
PT-2022-3844 · Microsoft · Active Directory Federation Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services affected versions not specified Description: The issue is related to insufficient access restrictions in Active Directory Federation Services AD FS on Windows operating systems. It allows a remote attacker...
Archer Platform 安全漏洞
Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions 6.3 through 6.11 that stems from incorrect access control in the SSO ADFS functionality. A malicious user may be able to exploit this vulnerability to...
PT-2022-20189 · Rsa · Archer Platform
Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.3 through 6.10 before 6.10.0.3 Archer Platform versions 6.9 through 6.9.3 before 6.9.3.4 Archer Platform versions prior to 6.11.0.0 Description: The issue is related to an Improper Access Control Vulnerability withi...
The vulnerability of the Active Directory Federation Services (AD FS) for Windows operating systems allows a perpetrator to circumvent security restrictions and enhance their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...