OneLogin records

11 published records for vendor onelogin.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 90.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
57Plan	CVE-2025-25292No exploit	Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)omniauth · omniauth saml · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.3	—	65.0%	Mar 12, 2025
43Plan	CVE-2025-25291Proof of concept	ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)omniauth · omniauth saml · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.3	—	20.9%	Mar 12, 2025
42Plan	CVE-2024-45409Proof of concept	The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selectoronelogin · ruby-saml · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.8	—	10.6%	Sep 10, 2024
40Plan	CVE-2017-11427Proof of concept	Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversalonelogin · pythonsaml · CWE-287 Pre-auth Auth bypass	Critical9.8	—	4.6%	Apr 17, 2019
40Plan	CVE-2017-11428No exploit	Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversalonelogin · ruby-saml · CWE-287 Pre-auth Auth bypass	Critical9.8	—	2.4%	Apr 17, 2019
39Monitor	CVE-2015-20108No exploit	xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not useonelogin · ruby-saml · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.3%	May 27, 2023
37Monitor	CVE-2025-66567No exploit	ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)onelogin · ruby-saml · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.3	—	0.3%	Dec 9, 2025
37Monitor	CVE-2025-66568No exploit	ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validationonelogin · ruby-saml · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.3	—	0.2%	Dec 9, 2025
31Monitor	CVE-2016-10928No exploit	The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.onelogin · onelogin saml sso · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	1.6%	Aug 22, 2019
30Monitor	CVE-2025-25293No exploit	ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responsesomniauth · omniauth saml · CWE-400 Pre-auth Denial of service	High7.7	—	1.5%	Mar 12, 2025
30Monitor	CVE-2016-5697No exploit	Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.onelogin · ruby-saml · CWE-91 Pre-auth	High7.5	—	1.2%	Jan 23, 2017

CVE-2025-25292
57Plan
Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)
CriticalCVSS 9.3No exploitEPSS 65%
omniauth · omniauth samlMar 12, 2025
CVE-2025-25291
43Plan
ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)
CriticalCVSS 9.3Proof of conceptEPSS 20%
omniauth · omniauth samlMar 12, 2025
CVE-2024-45409
42Plan
The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
CriticalCVSS 9.8Proof of conceptEPSS 10%
onelogin · ruby-samlSep 10, 2024
CVE-2017-11427
40Plan
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
CriticalCVSS 9.8Proof of conceptEPSS 4%
- Pre-auth
- Auth bypass
onelogin · pythonsamlApr 17, 2019
CVE-2017-11428
40Plan
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
onelogin · ruby-samlApr 17, 2019
CVE-2015-20108
39Monitor
xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not use
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
onelogin · ruby-samlMay 27, 2023
CVE-2025-66567
37Monitor
ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
CriticalCVSS 9.3No exploitEPSS 0%
onelogin · ruby-samlDec 9, 2025
CVE-2025-66568
37Monitor
ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation
CriticalCVSS 9.3No exploitEPSS 0%
onelogin · ruby-samlDec 9, 2025
CVE-2016-10928
31Monitor
The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
onelogin · onelogin saml ssoAug 22, 2019
CVE-2025-25293
30Monitor
ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses
HighCVSS 7.7No exploitEPSS 1%
- Pre-auth
- Denial of service
omniauth · omniauth samlMar 12, 2025
CVE-2016-5697
30Monitor
Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
onelogin · ruby-samlJan 23, 2017