Shibboleth
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OpenSAML C++ library | 1 | – | Mar 28, 2025 |
| Service Provider | 1 | – | Sep 10, 2025 |
Exploited and recent CVEs
- CVE-2025-9943 Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider 0.4%
- CVE-2025-31335 The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures). 0.2%