Known vulnerabilities in shibboleth-sp (Debian package)
Vendor:
Debian
Software:
shibboleth-sp (Debian package)
Software CPE:
cpe:2.3:o:debian:shibboleth-sp_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.5.0+dfsg-2+deb13u1
3.4.1+dfsg-2+deb12u1
3.1.0+dfsg1-1
3.2.0+dfsg1-1
3.2.0+dfsg1-2
3.2.1+dfsg1-1~bpo10+1
3.2.1+dfsg1-1
3.2.2+dfsg1-1~bpo10+1
3.2.2+dfsg1-1
3.2.3+dfsg1-1
3.3.0+dfsg1-1
3.4.1+dfsg-1
3.4.1+dfsg-2
3.4.1+dfsg-2.1~exp1
3.4.1+dfsg-2.1
3.5.0+dfsg-1
3.5.0+dfsg-2
3.0.4+dfsg1-1+deb10u2
3.0.4+dfsg1-1+deb10u1
3.1.0+dfsg1-2~bpo9+1
3.1.0+dfsg1
3.1.0+dfsg1-2~bpo10+1
3.1.0+dfsg1-2
3.0.4+dfsg1
1.3f.dfsg1-1
1.3f.dfsg1-2
1.3f.dfsg1-2+etch1
1.3f.dfsg1-2+etch2
1.3f.dfsg1-3
1.3f.dfsg1-4
1.3f.dfsg1-5
1.3f.dfsg1-6
1.3f.dfsg1-6.1
1.3f.dfsg1-7
1.3.1.dfsg1-1
1.3.1.dfsg1-2
1.3.1.dfsg1-3~bpo40+1
1.3.1.dfsg1-3
1.3.1.dfsg1-3+lenny1~bpo40+1
1.3.1.dfsg1-3+lenny1
1.3.1.dfsg1-3+lenny2~bpo40+1
1.3.1.dfsg1-3+lenny2
1.3.1.dfsg1-4
3.0.2+dfsg1-1
3.0.2+dfsg1-2
3.0.3+dfsg1-1
3.0.4+dfsg1-1~bpo9+1
3.0.4+dfsg1-1
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114998 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CWE-89 | High | 3.4.1+dfsg-2+deb12u1, 3.5.0+dfsg-2+deb13u1 | 09.09.2025 |
SB2025090914 SB2025090919 |
||
| #VU51583 - Improper input validation |
CWE-20 | Low | 3.0.4+dfsg1-1+deb10u1 | 19.03.2021 |
SB2021031904 SB2021031905 |