Picketlink
3 CVEs tracked since 2015. Since Aug 2015, none of them reached CISA KEV.
Picketlink CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2015-08 | 3 | 0 |
Products
The products that kept showing up in Picketlink's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 3 most recently published vulnerabilities affecting Picketlink.
- CVE-2015-3158The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote ...4.0
- CVE-2015-6254The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the locatio...6.0
- CVE-2015-0277The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to ...6.0
The record
- Peak rank
- #43 in Aug 2015
- Busiest month shown
- Aug 2015, 3 CVEs
- Months with a KEV entry
- 0 since Aug 2015
- Monthly snapshots
- 1 since 2015