What’s Vulnerable › Products

Shibboleth Service Provider vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Shibboleth Service Provider version is affected

Latest Shibboleth Service Provider vulnerabilities

• CVE-2025-9943 — Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider (CVSS 9.1)
• CVE-2023-22947 — (CVSS 7.3)
• CVE-2021-31826 — (CVSS 7.5)
• CVE-2021-28963 — (CVSS 5.3)
• CVE-2019-19191 — (CVSS 7.8)
• CVE-2010-2450 — (CVSS 7.5)
• CVE-2017-16852 — (CVSS 8.1)
• CVE-2015-2684 — (CVSS 4.0)