Skip to content
Onelogin vulnerabilities
Newest
-
onelogin ruby-saml
ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation
CVE-2025-66568
Fix available
9.3 Critical
-
onelogin ruby-saml
ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
CVE-2025-66567
Fix available
9.3 Critical
-
onelogin active directory connector
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the...
CVE-2025-52925
5.0 Medium
-
omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more
Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)
CVE-2025-25292
Fix available
EPSS 65.1%
9.3 Critical
-
omniauth saml, onelogin ruby-saml, netapp storagegrid +2 more
ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)
CVE-2025-25291
Fix available
EPSS 21.0%
9.3 Critical
-
omniauth saml, onelogin ruby-saml +1 more
ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses
CVE-2025-25293
Fix available
7.7 High
-
omniauth saml, onelogin ruby-saml, gitlab +1 more +3 more
The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
CVE-2024-45409
Public exploitFix available
EPSS 10.7%
10.0 Critical
-
onelogin ruby-saml
ruby-saml vulnerable to XPath injection
CVE-2015-20108
Fix available
9.8 Critical
-
onelogin saml sso
The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for...
CVE-2016-10928
7.5 High
-
onelogin ruby-saml
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
CVE-2017-11428
Fix available
7.7 High
-
onelogin pythonsaml
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
CVE-2017-11427
Public exploitFix available
7.7 High
-
onelogin ruby-saml
Ruby-saml allows attackers to perform XML signature wrapping attacks
CVE-2016-5697
Fix available
7.5 High