[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$felg460LQxTkeR0BHgWCYqdfoRrkEEASernNal701_wk":3,"g5a-ex:shibboleth\u002Fidentity_provider@*":177,"g5a-family:shibboleth\u002Fidentity_provider":179},{"success":4,"data":5},true,{"product":6,"versions":92,"topVulnerabilitiesByEpss":131,"kevVulnerabilities":154,"seoMetadata":155,"meta":174},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":91},"shibboleth","identity_provider",38,3,0,"2020-10-28",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.3",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0.11",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.1",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.1.2",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.1",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.1.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.3.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.2",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.3",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.4",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.5",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.6",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.7",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.7.1",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.8",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.1",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.1.1",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.1.2",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0.1",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.2",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.3",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.4",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.5",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0","Identity Provider by Shibboleth is a technology product with 38 tracked versions and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},[132,139,147],{"cveId":133,"description":134,"publishedDate":12,"cvssScore":135,"cvssVersion":136,"severity":137,"isKev":16,"epssScore":138},"CVE-2020-27978","Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session.",7.5,"v3.1","High",0.01855,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":144,"severity":145,"isKev":16,"epssScore":146},"CVE-2015-1796","The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.","2015-07-08",4.3,"v2","Medium",0.01256,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":152,"severity":145,"isKev":16,"epssScore":153},"CVE-2014-3603","The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","2019-04-04",5.9,"v3.0",0.00844,[],{"title":156,"metaDescription":157,"keywords":158,"structuredData":159},"Identity Provider by Shibboleth - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Identity Provider by Shibboleth covering 38 versions with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Identity Provider vulnerabilities, Identity Provider security, Identity Provider CVE, Shibboleth Identity Provider, Identity Provider threat intelligence, Shibboleth security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":160,"@type":161,"name":162,"description":157,"url":163,"manufacturer":164,"applicationCategory":168,"softwareVersion":169,"mainEntity":170},"https:\u002F\u002Fschema.org","SoftwareApplication","Identity Provider","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fshibboleth\u002Fidentity_provider",{"@type":165,"name":166,"url":167},"Organization","Shibboleth","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fshibboleth","Security Software","38 versions tracked",{"@type":171,"name":172,"description":173,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Identity Provider Security Vulnerabilities","Security vulnerabilities affecting Identity Provider by Shibboleth",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":175,"apiVersion":176},"2026-10-19T19:54:26.033Z","3.0",{"rows":178,"total":11,"capped":16,"failed":11},[],[]]