Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how simplesamlphp compares to other vendors in security performance

View Risk Score →

composer/simplesamlphp/simplesamlphpSimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`

Risk 48
Severity
7.1
First published (updated )
CVE-2026-49284

SimpleSAMLphp simplesamlphp-module-casserverSimpleSAMLphp-casserver has an Open Redirect vulnerability via logout

Risk 38
Severity
6.1
First published (updated )
CVE-2025-65954

composer/simplesamlphp/xml-securityxml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption

Risk 38
Severity
8.2
EPSS
0.01%
First published (updated )
CVE-2026-32600

composer/simplesamlphp/saml2SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding

Risk 34
Severity
8.6
EPSS
0.02%
First published (updated )
CVE-2025-27773

composer/simplesamlphp/saml2Validation of SignedInfo

Risk 44
Severity
7.5
First published (updated )
CVE-2023-49087
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

nuget/Sustainsys.Saml2Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2023-41890

composer/simplesamlphp/simplesamlphp-module-openidprovidersimplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

Risk 35
Severity
5.4
First published (updated )
CVE-2010-10008

composer/simplesamlphp/simplesamlphp-module-infocardInformation Cards Module cross site scripting

Risk 39
Severity
6.1
First published (updated )
CVE-2010-10004

composer/simplesamlphp/simplesamlphp-module-openidSimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting

Risk 39
Severity
6.1
First published (updated )
CVE-2010-10002

SimpleSAMLphpCross-site scripting in SimpleSAMLphp

Risk 34
Severity
5.4
First published (updated )
CVE-2020-5226
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SimpleSAMLphpLog injection in SimpleSAMLphp

Risk 34
Severity
5.5
First published (updated )
CVE-2020-5225

Debian Debian Linuxsimplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which…

Risk 45
Severity
7.5
First published (updated )
CVE-2011-4625

composer/robrichards/xmlseclibsCritical signature bypass

Risk 82
Severity
8.8
First published (updated )
CVE-2019-3465

composer/simplesamlphp/simplesamlphpInformation disclosure of source code in SimpleSAMLphp

Risk 19
Severity
3.5
First published (updated )
CVE-2020-5301

composer/simplesamlphp/saml2Incorrect signature validation

Risk 78
Severity
8.1
First published (updated )
CVE-2018-7711
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/simplesamlphp/saml2Incorrect signature validation

Risk 45
Severity
7.5
First published (updated )
CVE-2018-7644

composer/simplesamlphp/simplesamlphpOpen redirection protection bypass

Risk 39
Severity
6.1
First published (updated )
CVE-2018-6520

Debian Debian LinuxUse of insecure connection charset (sqlauth module)

Risk 89
Severity
9.8
First published (updated )
CVE-2018-6521

composer/simplesamlphp/saml2Denial of Service in timestamp validation function

Risk 45
Severity
7.5
First published (updated )
CVE-2018-6519

Debian Debian LinuxSignature validation bypass (SAML 1.1)

Risk 78
Severity
8.1
First published (updated )
CVE-2017-18122
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Debian Debian LinuxXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2017-18121

composer/simplesamlphp/simplesamlphpInvalid token creation and validation

Risk 37
Severity
5.9
First published (updated )
CVE-2017-12867

Debian Debian LinuxInput Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2017-12869

composer/simplesamlphp/simplesamlphpSession fixation and authentication bypass (authcrypt module)

Risk 89
Severity
9.8
First published (updated )
CVE-2017-12868

composer/simplesamlphp/simplesamlphpInfoleak

Risk 37
Severity
5.9
First published (updated )
CVE-2017-12870
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SimpleSAMLphpWeak Encryption

Risk 37
Severity
5.9
First published (updated )
CVE-2017-12871

composer/simplesamlphp/simplesamlphpInfoleak

Risk 37
Severity
5.9
First published (updated )
CVE-2017-12872

Debian Debian LinuxIncorrect persistent NameID generation

Risk 89
Severity
9.8
First published (updated )
CVE-2017-12873

Debian Debian LinuxInput Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2017-12874

composer/simplesamlphp/simplesamlphpInput Validation

Risk 48
Severity
6.3
First published (updated )
CVE-2016-9955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203