mitreid records

3 published records for vendor mitreid.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2021-27582No exploit	org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 containsmitreid · connect · CWE-1321 Pre-auth Prototype pollution	Critical9.1	—	2.2%	Feb 23, 2021
36Monitor	CVE-2021-26715No exploit	The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF) vulnerability.mitreid · connect · CWE-918 Pre-auth SSRF XSS	Critical9.1	—	1.4%	Mar 25, 2021
25Monitor	CVE-2020-5497No exploit	The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsamitreid · connect · CWE-79 pre-auth RCE XSS	Medium6.1	—	2.1%	Jan 3, 2020

CVE-2021-27582
37Monitor
org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains
CriticalCVSS 9.1No exploitEPSS 2%
- Pre-auth
- Prototype pollution
mitreid · connectFeb 23, 2021
CVE-2021-26715
36Monitor
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF) vulnerability.
CriticalCVSS 9.1No exploitEPSS 1%
mitreid · connectMar 25, 2021
CVE-2020-5497
25Monitor
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsa
MediumCVSS 6.1No exploitEPSS 2%
- pre-auth RCE
- XSS
mitreid · connectJan 3, 2020