[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFgILj5r9zOmMHHslwlqS858LFCZ2oSrD7hkgBx13cgw":3,"g5a-ex:shibboleth\u002Fopensaml@*":118,"g5a-family:shibboleth\u002Fopensaml":120},{"success":4,"data":5},true,{"product":6,"versions":54,"topVulnerabilitiesByEpss":73,"kevVulnerabilities":95,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":53},"shibboleth","opensaml",18,3,0,"2017-11-16",[14,18,20,22,25,27,29,31,33,35,37,39,41,43,45,47,49,51],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.0",2,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.2",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"2.4.3",1,{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"2.5.0",{"version":28,"cve_count":24,"kev_count":11,"has_kev":17},"2.5.1",{"version":30,"cve_count":24,"kev_count":11,"has_kev":17},"2.5.2",{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},"2.5.3",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"2.5.4",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"2.5.5",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"2.5.5.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"2.6.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"2.6.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.1",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.1",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.0","Opensaml by Shibboleth is a technology product with 18 tracked versions and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":24,"kev_count":11,"has_kev":17},{"version":30,"cve_count":24,"kev_count":11,"has_kev":17},{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},[74,82,88],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":81},"CVE-2013-6440","The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.","2014-02-14",5,"v2","Medium",0.02752,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":79,"severity":80,"isKev":17,"epssScore":87},"CVE-2011-1411","Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an \"XML Signature wrapping attack.\"","2011-09-02",5.8,0.02291,{"cveId":89,"description":90,"publishedDate":12,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":94},"CVE-2017-16853","The DynamicMetadataProvider class in saml\u002Fsaml2\u002Fmetadata\u002Fimpl\u002FDynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.",8.1,"v3.0","High",0.01398,[],{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Opensaml by Shibboleth - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Opensaml by Shibboleth covering 18 versions with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Opensaml vulnerabilities, Opensaml security, Opensaml CVE, Shibboleth Opensaml, Opensaml threat intelligence, Shibboleth security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Opensaml","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fshibboleth\u002Fopensaml",{"@type":106,"name":107,"url":108},"Organization","Shibboleth","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fshibboleth","Security Software","18 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Opensaml Security Vulnerabilities","Security vulnerabilities affecting Opensaml by Shibboleth",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-19T19:53:28.330Z","3.0",{"rows":119,"total":11,"capped":17,"failed":11},[],[121],{"product":122,"cves":16},"opensaml_java"]