Threats affecting pkg:rpm/suse/shibboleth-sp

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.4%	CVE-2025-9943SUSE shibboleth-sp · Security update for shibboleth-sp Critical9.1EPSS 0.4%2026-07-22GCVE DatabaseCVE-2025-9943 A security update for the Shibboleth Service Provider (shibboleth-sp) addresses a high-severity SQL injection vulnerability identified as CVE-2025-9943. The flaw exists in the handling of the "ID" attribute within the SAML response when the replay cache is configured to use an SQL database for storage. This vulnerability could allow an attacker to perform SQL injection attacks against the backend database used by the replay cache. EPSS 0.4%Report on CVE-2025-9943 Vulnerability SUSE Product Security Team	GCVE Database	2026-07-22

Page 1 of 1