Saml

This hub aggregates every CVE we track for Saml, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Saml.

• CVE-2025-64131Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser...7.5Oct 29, 2025
• CVE-2023-45683Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/saml7.1Oct 16, 2023
• CVE-2023-29129A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Men...9.1Jun 13, 2023
• CVE-2022-45597ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer ...9.8Mar 24, 2023
• CVE-2023-28119crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb7.5Mar 22, 2023
• CVE-2023-25957A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendi...9.1Mar 14, 2023
• CVE-2022-46823A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SA...9.3Jan 10, 2023
• CVE-2022-41912crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements9.1Nov 28, 2022
• CVE-2022-44457A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compa...9.8Nov 8, 2022
• CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New T...9.8Sep 13, 2022
• CVE-2022-32286A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendi...6.1Jun 14, 2022
• CVE-2022-32285A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendi...7.5Jun 14, 2022
• CVE-2021-21678Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.8.8Aug 31, 2021
• CVE-2021-36786The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.7.5Aug 13, 2021
• CVE-2021-36785The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.5.4Aug 13, 2021