simplesamlphp simplesamlphp vulnerabilities
5 published CVEs name simplesamlphp simplesamlphp among the affected products.
- Published CVEs
- 5
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 2Low 1Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20203
- 20261
Newest CVEs
- CVE-2026-49284
SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`
simplesamlphp · simplesamlphp
High7.1 - CVE-2020-5301
Information disclosure of source code in SimpleSAMLphp
simplesamlphp · simplesamlphp
Low3.0 - CVE-2020-5226
Cross-site scripting in SimpleSAMLphp
simplesamlphp · SimpleSAMLphp
Medium4.4 - CVE-2020-5225
Log injection in SimpleSAMLphp
simplesamlphp · SimpleSAMLphp
Medium4.4 - CVE-2011-4625
simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
simplesamlphp · simplesamlphp
High7.5