Shibboleth vulnerabilities

20 CVEs affecting Shibboleth products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Service Provider, Identity Provider, Opensaml, Opensaml Java, Xmltooling-C.

• Service Provider: 8 CVEs
• Identity Provider: 3 CVEs
• Opensaml: 3 CVEs
• Opensaml Java: 2 CVEs
• Xmltooling-C: 2 CVEs
• Oidc Op: 1 CVE
• Opensaml C++ Library: 1 CVE
• Shibboleth-Identity-Provider: 1 CVE
• Shibboleth-SP: 1 CVE
• Xmltooling: 1 CVE